[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Isn't IP Forwarding the default?



Folks,

I am replacing a CISCO router with a Linux box running 2.0.34.  I have
an Emerging Technologies Card, which connects to the V.35 "modem" my ISP 
gave.  The machine refuses to forward packets accross interfaces.

My configuration:

Linux earth 2.0.34 #19 Sun Oct 17 17:03:59 IST 1999 i586 unknown

eth0	Local (192.168.x.y) card
eth1	"valid" IP card (12.10.198.112/29) card, for mail servers, etc
ets0	Card to talk to RF Modem, runs PPP

[ghane@earth:~> netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
12.10.199.61    0.0.0.0         255.255.255.255 UH     1500 0          0 ets0
12.10.198.112   0.0.0.0         255.255.255.248 U      1500 0          0 eth1
192.168.200.0   0.0.0.0         255.255.255.0   U      1500 0          0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U      3584 0          0 lo
0.0.0.0         12.10.199.61    0.0.0.0         UG     1500 0          0 ets0

# /sbin/ipfwadm -F -e -p accept

# echo "1" > /proc/sys/net/ipv4/ip_forward

IP Masq works beautifully.

[ghane@earth:~> /sbin/ipfwadm -l -v -F
IP firewall forward rules, default policy: accept
type  prot source               destination          ports
acc/m all  arjun.eurolink.stpn.soft.net anywhere             n/a
acc/m all  nakul.eurolink.stpn.soft.net anywhere             n/a
acc/m all  pc-16.eurolink.stpn.soft.net anywhere             n/a
acc/m all  12.10.198.116        anywhere             n/a

I know I should not have an open router, but that is secondary.  How can I
tell the box to forward, simply, blindly?  I will start firewalling later.

Thanks,

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sanjeev "Ghane" Gupta			Tel: +91(11) 6941831, 6946619
Eurolink Systems Ltd			Fax: +91(11) 6943732
New Delhi, India		      email: ghane@eurolink.stpn.soft.net
          Eurolink doesn't pay me to speak for it, so I don't
           Old age is not an accomplishment, nor youth a sin





Reply to: