Re: IP Masq and debian
I think for the second line you don't need to specify the -D, if you
only specify -S <x.x.x.x/x> then -D defaults to anywhere.
> > ipfwadm -F -p deny
> > ipfwadm -F -a m -S 192.168.1.0/2
I am not using dynamic addressing but I did write some custom scripts
that setup my ipmasq system, as the ones that came with the
distribution are not so great.
My suggestion to you is read the docs for PPP. /etc/ppp/ip.up and
/etc/ppp/ip.down are executed when a ppp connection is
connected/disconnected. The arguments to these scripts are the
addresses negotiated during the connection so you could setup your
ipmasq using this information easily.
Hope this helps man..
> At 06:31 PM 10/08/1998 -0400, Lee Bradshaw wrote:
> >Hi,
> >
> >How am I supposed to use the ipmasq package with ppp? Is it possible?
> >I tried using 0.0.0.0 as the external ip address, but I received a
> >few error messages when booting and I couldn't telnet to the machine
> >anymore. I couldn't find any documentation in /usr/doc/ipmasq and the
> >man pages just said that there were no useful man pages. After removing
> >ipmasq and rebooting telnet to the machine worked fine again.
> >
> >I executed the following commands to get masquerading to work manually:
> >
> > ipfwadm -F -p deny
> > ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0
> >
> >After changing the default route on another system I was able to bring
> >up web pages through the masquerading system.
> >
> >Does anyone have any suggestions on how to use the ipmasq package with ppp
> and
> >dynamic addresses (I assume it works ok with static addresses)? How about
> >suggestions on where to put ipfwadm filtering commands in the initialization
> >directories?
> >
> >--
> >Lee Bradshaw lee@sectionIV.com (preferred)
> >Alantro Communications lee@alantro.com
> >
> >
> >--
> >Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org <
> /dev/null
> >
> >
>
>
> --
> Unsubscribe? mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
>
Wayne Cuddy
CRB-WEB (C & H Consulting)
http://www.crb-web.com
wayne@crb-web.com
Reply to: