RE: IP forwarding

["Mullins, Ron" <rmullins@DigiTerra-Inc.com>]

> As soon as I do an "ipchains -P MASQ" (yes, I know that's 
> evil), the pings
> work.  So, I can do masquerading.

(lightning bolt to head) As stated in the IPMasq Howto, "Ja, you do have to
state masq'ing packets. Forwarding chain doesn't mean outside all the time."

Besides all the other chains listed in the Howto is specifically the
following:

ipchains -A forward -i (ppp0?) -s (internal network) -d (any or 0.0.0.0/0)
-j MASQ

In english:
append to forward chain that on interface ppp0 from our internal network to
any destination jump to Masq'ing.