Re: MASQUERADE

["Thor" <thor@tech-center.com>]

Hi


> Hi all,
>
> I still have a masquerade problem, and nothing helps me to go to the right
> way.
>
> This is my configuration :
>
> A server (10.0.0.1) with internet access on eth0, and local network access

why you don't assign an internet number on eth0 if your eth0 interfaces
is on the internet side ? 10.0.0.0 is a entire class A for internal network.
I think this may be a problem if you don't have
a router/gateways with another NAT active ... and NAT over NAT
can do a regular job ? never tryed ;-)

> (192.168.0.1) on eth1
> A workstation (192.168.0.14) wants to access to internet
>
> This is what I done :
>
> On the workstation, I specify the gateway and the dns as 192.168.0.1
> On the server, I ran the following code :
>
>            iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j
> MASQUERADE
>
> When I tried my configuration, the log said to me : 'bad port from
> 192.168.0.14'.
>
> Anyone can help me ?

i suppose that you have already compiled the kernel
with ip forward and masquerading support
#apt-get update
#atp-get install ipmasq
#cat >/etc/ipmasq/rules/A01interfaces.rul
EXTERNAL="eth0"
INTERNAL="eth1"
<ctrl>D

reboot or do /etc/init.d/ipmasq start

---
;---+---;
bye |
bye |hor