Re: IPMasqing Act 2 Scene 42

[will trillich <will@serensoft.com>]

On Tue, Jun 19, 2001 at 11:45:51AM -0700, Stephen Handley wrote:
> Thanks Will
> 
> So it looks like I'm denying inputs received on eth0 with IP 63.105.28.151
> and when I perhaps should be accepting them??? Does that sound right, given
> that eth0 is connected to my ISP side? 
> 
> > /sbin/ipchains -A input -J DENY -i eth0 -d 63.105.28.151/32
> > /sbin/ipchains -A input -J DENY -i eth0 -d 63.105.28.255/32
> 
> How do I change that?

<guessing>maybe we should look at the /etc/network/interfaces
file to see if anything is goofy there... my ipmasq worked
out-of-the-box.</guessing> my theory is that the interfaces file
determines how all the connections and default paths work:

	# /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)

	# The loopback interface
	iface lo inet loopback

	iface eth0 inet static
		address 192.168.1.1
		netmask 255.255.0.0
		network 192.168.1.0
		broadcast 192.168.1.255

	iface eth1 inet static
		address ip.addr.shows.here
		netmask 255.255.255.0
		network ip.addr.shows.0
		broadcast ip.addr.shows.255
		# where do packets go that aren't gonna be
		# locally-determined? to the gateway/router:
		gateway ip.addr.of.router

and ifconfig shows--

	eth0      Link encap:Ethernet  HWaddr 00:60:8C:82:C4:59  
			  inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.0.0
			  inet6 addr: fe80::60:8c82:c459/10 Scope:Link
			  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
			  RX packets:9892374 errors:398 dropped:0 overruns:440 frame:398
			  TX packets:8098448 errors:0 dropped:0 overruns:0 carrier:40
			  collisions:6997 txqueuelen:100 
			  Interrupt:10 Base address:0x300 

	eth1      Link encap:Ethernet  HWaddr 00:60:97:1E:67:FD  
			  inet addr:ip.addr.shows.here  Bcast:ip.addr.shows.255  Mask:255.255.255.0
			  inet6 addr: fe80::60:971e:67fd/10 Scope:Link
			  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
			  RX packets:9251499 errors:224 dropped:0 overruns:268 frame:224
			  TX packets:9605998 errors:0 dropped:0 overruns:0 carrier:0
			  collisions:16295 txqueuelen:100 
			  Interrupt:11 Base address:0x340 

	lo        Link encap:Local Loopback  
			  inet addr:127.0.0.1  Mask:255.0.0.0
			  inet6 addr: ::1/128 Scope:Host
			  UP LOOPBACK RUNNING  MTU:3924  Metric:1
			  RX packets:2253699 errors:0 dropped:0 overruns:0 frame:0
			  TX packets:2253699 errors:0 dropped:0 overruns:0 carrier:0
			  collisions:0 txqueuelen:0 

and then "route -n" shows

	Kernel IP routing table
	Destination     Gateway           Genmask         Flags Metric Ref    Use Iface
	ip.addr.shows.0 0.0.0.0           255.255.255.0   U     0      0        0 eth1
	192.168.0.0     0.0.0.0           255.255.0.0     U     0      0        0 eth0
	0.0.0.0         ip.addr.of.router 0.0.0.0         UG    0      0        0 eth1

-- 
DEBIAN NEWBIE TIP #4 from Will Trillich <will@serensoft.com> 
:
Want to know WHAT FILES ARE PROVIDED BY PACKAGE x-y-z? This is a
job for dpkg: enter "dpkg -L <package-name>" at the command
prompt.  Try "dpkg -L netbase | pager" for example.

Also see http://newbieDoc.sourceForge.net/ ...