[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ipforward'ing on in kernel?



On Fri, May 29, 1998 at 10:49:33AM -0500, Gregory Guthrie wrote:
> The basic question is: is IP-forwarding on in the default kernel
No.

> , and how does one tell
look at /boot/config-<kernel-version>, included in every kernel-image-xxx
package of debian. (N.B. This inlcudes kernel-image-xxx packages you build
yourself when using make-kpkg, which is one of many reasons to use this
package to build your custom kernel)

> or does one have to build a custom kernel to do routing?
Yes. You should do that for routers anyway. There are so much possibilities
and tuning to be done if you want to build a router.

> -- In gereral, how does one tell if a feature is on in a kernel?
That is next to impossible, if you are given a kernel image only.

> We want to setup a local simple router-pair, to create a LAN-remote subnet
> segment.
> 
> I thought we could tell by "cat /proc/ksyms | grep forward" :
> 	00140988 ip_forward_R35268aee
> 	0022ae04 sysctl_ip_forward_Ra7d20d83
> 
> Is this correct? seems to say yes; or do we have to rebuild a new kernel.
No, it is not. You do need a custom kernel.

N.B: I do not know, why the above symbols are in /proc/ksyms. They are
present in mine also, although I know I do not have ip forwarding enabled.
Does anyone know a better test?

>   "grep FORWARD /usr/src/linux/.config" is the ideal command for this. 
>      CONFIG_IP_FORWARD=y                 means it is turned ON
>      # CONFIG_IP_FORWARD is not set      means it is turned OFF 
This still holds for debian, if you replace /usr/src/linux/.config
by /boot/config-`uname -r`


> What about Debian? 
> On the CDROM (1.3.1), the .config file says:
>      ----------------------
> ...
>      # CONFIG_IP_FORWARD is not set
> ...
> Does this correspond to the binary kernel distributed, or is it just a
> standard default spec for building new kernels?
it corresponds to the binary kernel distributed.

> 4) We also need PPP proxyarp, is it on by default (curious about the ARPD
> not set).
This is not related to kernel compiling options. ARPD is in case you have a
single (non bridged) ethernet with a *lot* (more that 256) of nodes on it.

Nils

--
*-----------------------------------------------------------------------------*
| Quotes from the net:  L> Linus Torvalds, W> Winfried Truemper               |
| L>this is the special easter release of linux, more mundanely called 1.3.84 |
| W>Umh, oh. What do you mean by "special easter release"?. Will it quit      |
* W>working today and rise on easter?                                         *

Attachment: pgpHGzzCnm0_f.pgp
Description: PGP signature


Reply to: