Re: masquerading for internet access
On Sat, Nov 17, 2001 at 11:36:31AM +0100, Eric Smith wrote:
> According to Michel Loos on Fri, Nov 16, 2001 at 09:54:53PM -0200:
> > > I thought this would just work out of the box :(
> that did not work for me - but this entry in modules.conf did:
>
> ### update-modules: start processing /etc/modutils/ethernet
> alias eth0 rtl8139
> alias eth1 3c59x
>
> Now I have the eth0 pointing to the cable modem and eth1 to the lan as
> suggested.
>
If you are using debian pre-compiled 2.4 Kernel like me, you need to
enable quite a bit more modules to get ipmasq to work. Tricky.
I have followings in /etc/modules
# net/ipv-4
ip_gre
ipip
# net/ipv-4/netfilter
# iptable (in order)
ip_tables
ip_conntrack
ip_conntrack_ftp
iptable_nat
iptable_filter
iptable_mangle
#
ip_nat_ftp
ip_queue
#
ipt_LOG
ipt_MARK
ipt_MASQUERADE
ipt_MIRROR
ipt_REDIRECT
ipt_REJECT
ipt_TCPMSS
ipt_TOS
ipt_limit
ipt_mac
ipt_mark
ipt_multiport
ipt_owner
ipt_state
ipt_tcpmss
ipt_tos
ipt_unclean
#
ipchains
ipfwadm
#
Cheers ;-)
--
~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~
+ Osamu Aoki <debian@aokiconsulting.com>, GnuPG-key: 1024D/D5DE453D +
+ My debian quick-reference, http://www.aokiconsulting.com/quick/ +
Reply to: