Thanks for the info. The web site was extremely helpful and I now have iptables working and am learning how to secure my network with hosts.allow and hosts.deny.
I would like very much to make test comparisons for speed, ease of use and reliability using W2k "Internet Connection Sharing", IP Masquerading and iptables. I now have W2k and iptables working, but IP Masquerading is still not working. It seems that unlike RH 7.1 the 7.2 install did not install the IP Masquerading modules, such as: ipip ip_masq_ftp ip_masq_raudio, etc. because they are reported as not found during attempted execution. I didn't manually install them when I was using RH 7.1 on my other box and I have no idea where to get them or where to put them. Please advise. Kind regards and many thanks for the help so far, Bill > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Furnish, Trever G > Sent: Tuesday, March 19, 2002 5:22 AM > To: '[EMAIL PROTECTED]' > Subject: RE: Please help with IP Masquerading > > > If you plan on publishing your results back to the list it > would also be > interesting to see a comparison between ipchains and > iptables, which is also > included with RH7.2. The masquerading made simple howto > provides a quick > example of using iptables for masqerading: > > http://www.linuxdoc.org/HOWTO/Masquerading-Simple-HOWTO/ > > -t. > > > -----Original Message----- > From: BG [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, March 19, 2002 2:08 AM > To: [EMAIL PROTECTED] > Subject: RE: Please help with IP Masquerading > > > thanks! > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED]]On Behalf Of Pieter De Wit > > Sent: Monday, March 18, 2002 10:55 PM > > To: '[EMAIL PROTECTED]' > > Subject: RE: Please help with IP Masquerading > > > > > > Hello Bill, > > > > Check if ipchains is loaded, otherwise just run "insmod > > ipchains" before the > > whole script. > > > > Cheers, > > > > Pieter > > > > -----Original Message----- > > From: BG [mailto:[EMAIL PROTECTED]] > > Sent: 18 March 2002 18:42 > > To: [EMAIL PROTECTED] > > Subject: Please help with IP Masquerading > > > > > > Hi All, > > > > I have setup a new dual boot machine with W2k and RH 7.2. I > > want to test > > the reliability and speed differences between IP Masquerading > > and Internet > > Connection Sharing. This new machine has 2 ethernet cards, > > one goes to the > > cable modem and the other to the internal network (static ip addr = > > 192.168.0.1). I have tested the machne for internet access > > in RH 7.2 and > > all works fine. Also, I can ping the machine from all > other internal > > network machines just fine. > > > > I was previously running RH 7.1, an upgrade from 7.0, as my > > internet server > > using IP Masquerading on another machine I have tucked away > > untouched as a > > backup. The new machine as above is intended to replace this backup > > machine. > > > > I added to my rc.d file on the new machine the following from my old > > machine: > > > > # IP Masquerading > > echo 1 > /proc/sys/net/ipv4/ip_forward > > extip = "`/sbin/ifconfig eth1 | grep | 'inet addr' | awk > > '{print $2}' | sed > > -e 's/.*://'`" > > /sbin/ifconfig lo 127.0.0.1 > > /sbin/route add -net 127.0.0.0 netmask 255.0.0.0 lo > > /sbin/ifconfig eth0 192.168.0.1 > > /sbin/ifconfig eth1 $extip > > /sbin/route add $extip eth1 > > /sbin/route add -net 192.168.0.0.0 eth0 > > echo "loading IP Masquerading Modules..." > > /sbin/depmod -a > > /sbin/modprobe ipip > > /sbin/modprobe ip_masq_ftp > > /sbin/modprobe ip_masq_raudio > > /sbin/modprobe ip_masq_irc > > /sbin/modprobe ip_masq_autofw > > /sbin/modprobe ip_masq_cuseeme > > /sbin/modprobe ip_masq_portfw > > /sbin/modprobe ip_masq_quake > > /sbin/modprobe ip_masq_user > > /sbin/modprobe ip_masq_vdolive > > echo -n "Forward..." > > /sbin/ipchains -F forward > > /sbin/ipchains -P forward DENY > > /sbin/ipchains -A forward -j MASQ -s 192.168.0.0/24 > > /sbin/ipchains -A forward -s 0.0.0.0/0 -d 0.0.0.0/0 -l -j REJECT > > echo "done." > > > > This always worked fine on my old machine, but I get alot of > > errors during > > boot on the new machine during run of rc.d. The error > > messages fly by so > > fast I can't read them. IP masquerading does not work on the > > new machine. > > > > Please help. > > > > Thanks, > > Bill > > > > > > > > _______________________________________________ > > Redhat-list mailing list > > [EMAIL PROTECTED] > > https://listman.redhat.com/mailman/listinfo/redhat-list > > > > > > > > _______________________________________________ > Redhat-list mailing list > [EMAIL PROTECTED] > https://listman.redhat.com/mailman/listinfo/redhat-list _______________________________________________ Redhat-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo/redhat-list
