iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE iptables -t nat -A
POSTROUTING -o eth1 -j

 MASQUERADE

 service iptables restart

 ipchains -A forward -i eth1 -j MASQ

 echo 1 > /proc/sys/net/ipv4/ip_forward

Bye.


Il gio, 2002-10-24 alle 22:06, [EMAIL PROTECTED] ha
scritto:
> Send redhat-list mailing list submissions to
>       [EMAIL PROTECTED]
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>       https://listman.redhat.com/mailman/listinfo/redhat-list
> or, via email, send a message with subject or body 'help' to
>       [EMAIL PROTECTED]
> 
> You can reach the person managing the list at
>       [EMAIL PROTECTED]
> 
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of redhat-list digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: How do you reset up2date db? ([EMAIL PROTECTED])
>    2. Re: html mail (Daniel Goldin)
>    3. Re: (OT) Delete old messages (Javier Gostling)
>    4. Re: Support for ViewSonic flat panel monitors - THANKS! (Eric Sisler)
>    5. Re: Changing the default target CPU for the redhat GCC installation
>        on RH8.0. (Gordon Messmer)
>    6. channel bonding (Michael Rubin)
>    7. Sound problems with 2.4.18-17.8.0 kernel (Darryl Darling)
>    8. 7.3 vs 8.0 (Ashley M. Kirchner)
>    9. help with firewall setup ([EMAIL PROTECTED])
>   10. Re: html mail (Daniel Goldin)
>   11. Re: How do you reset up2date db? (Michael Schwendt)
>   12. Re: RH 8.0 - Security Level Configuration (Michael Schwendt)
>   13. Re: Changing the default browser (Joe Giles)
>   14. RE: html email (Joshua P. Metcalf)
>   15. RE: help with firewall setup (aljuhani)
> 
> --__--__--
> 
> Message: 1
> Date: Thu, 24 Oct 2002 11:50:42 -0700 (PDT)
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: Re: How do you reset up2date db?
> Reply-To: [EMAIL PROTECTED]
> 
> Yeah, I tried the up2date -p already.  It didn't make a difference.
> Thanks anyway.
> 
> 
> On Thu, 24 Oct 2002, Ernest E Vogelsinger wrote:
> 
> > At 19:17 24.10.2002, [EMAIL PROTECTED] said:
> > --------------------[snip]--------------------
> > >I got booted out of up2date due to some errors.
> > >When I try to do an up2date again it thinks it's already finished.
> > >I get the following message: None of the packages you requested were 
> > >found, or they are already updated.
> > >How do I reset the db?
> > --------------------[snip]-------------------- 
> > 
> > I believe ip2date -p will do that (it updates the RHN host with the package
> > info), but then again it could use a local DB instead of looking up the RPM
> > list. Give it a try.
> > 
> > 
> > --
> >    >O     Ernest E. Vogelsinger
> >    (\)    ICQ#   13394035
> >     ^     
> > 
> > 
> > 
> > 
> 
> 
> 
> 
> --__--__--
> 
> Message: 2
> Date: Thu, 24 Oct 2002 11:43:46 -0700
> From: Daniel Goldin <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: html mail
> Reply-To: [EMAIL PROTECTED]
> 
> On (10/24/02 13:53), [EMAIL PROTECTED] wrote:
> > On Thu, Oct 24, 2002 at 09:27:31AM -0700, Daniel Goldin wrote:
> > > David Wheeler is a self-professed Linux newbie, attempting to install
> > > Redhat for the first time. Singling him out--however gently--seems to
> > > me a bigger breach of etiquette than sending email in html form. Not
> > > the kind of welcome one would hope to get from an open-source
> > > community.
> > 
> > 
> > Sorry Dan, but pointing out to people that they should change the way
> > they are posting is actually the recommended thing to do according to
> > the netiquette experts:
> > 
> > Eric S. Raymond, Author of "The Cathedral and the Bazaar" wrote a document
> > about how to ask smart questions. Its a superbly helpful document and
> > it can be found here: http://www.tuxedo.org/~esr/faqs/smart-questions.html
> > 
> 
> Agreed. I may have gone overboard suggesting that the onus should be
> on the receiver. But I did feel that the tone of the complaint was
> unnecessarily irritable. There are gentler ways of pointing out correct
> etiquette, especially to people who are unlikely to have read Eric
> Raymond et al., rather than venting one's irritation.
> 
> 
> 
> -- 
> Daniel Goldin
> 323.225.1926
> [EMAIL PROTECTED]
> 
> 
> 
> 
> --__--__--
> 
> Message: 3
> Date: Thu, 24 Oct 2002 15:54:36 -0300
> From: Javier Gostling <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: (OT) Delete old messages
> Reply-To: [EMAIL PROTECTED]
> 
> 
> --K8nIJk4ghYZn606h
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
> 
> On Wed, Oct 23, 2002 at 03:48:48PM +0200, Emmanuel Seyman wrote:
> 
> > There are scripts that do this for you.
> > Archmbox is written in Perl
> > Archivemail is written in Python (and seems the best of the two).
> >=20
> > http://digilander.libero.it/yellowjester/archmbox/archmbox.html
> > http://archivemail.sourceforge.net/
> 
> Thanks! I'll check them up later (probably next week).
> 
> Cheers,
> --=20
> Javier Gostling
> Ingeniero de Sistemas
> Virtualia S.A.
> [EMAIL PROTECTED]
> Fono: +56 (2) 202-6264 x 130
> Fax: +56 (2) 342-8763
> 
> Av. Kennedy 5757, of 1502
> Las Condes
> Santiago
> Chile
> 
> --K8nIJk4ghYZn606h
> Content-Type: application/pgp-signature
> Content-Disposition: inline
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE9uEHsVjet1TIOL3YRAofvAJ9eT2covU/kQSFw57TJbtYHXql1AwCfap67
> w+1wxPFeLGzkQIaTj/1LA+E=
> =zODy
> -----END PGP SIGNATURE-----
> 
> --K8nIJk4ghYZn606h--
> 
> 
> 
> 
> --__--__--
> 
> Message: 4
> Subject: Re: Support for ViewSonic flat panel monitors - THANKS!
> From: Eric Sisler <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Date: 24 Oct 2002 13:10:42 +0000
> Reply-To: [EMAIL PROTECTED]
> 
> Model VG800 ordered and on the way.  Thanks!
> 
> -Eric
> 
> -- 
> 
> Eric Sisler <[EMAIL PROTECTED]>
> Library Applications Specialist
> Westminster Public Library
> Westminster, CO USA
> 
> Linux - Don't fear the Penguin.
> Want to know what we use Linux for?
> Visit http://gromit.westminster.lib.co.us/linux
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 5
> Subject: Re: Changing the default target CPU for the redhat GCC installation
>       on RH8.0.
> From: Gordon Messmer <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Date: 24 Oct 2002 12:18:17 -0700
> Reply-To: [EMAIL PROTECTED]
> 
> On Wed, 2002-10-23 at 12:41, Dave wrote:
> > BTW - The RH 8.0 GCC 'as shipped' default target CPU for Intel x86 machines
> > is i386 and according to the docs. this is used only as an optimization
> > 'hint' for the compiler
> 
> Red Hat uses -mcpu=i686 as the default for all of their builds.  The
> optimizations you want are in there...
> 
> We just went through a very long thread on this subject on the
> psyche-list.  You should be able to find it in the archives, but the
> most interesting message may be this one:
> https://listman.redhat.com/pipermail/psyche-list/2002-October/003457.html
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 6
> From: "Michael Rubin" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: channel bonding
> Date: Thu, 24 Oct 2002 14:16:28 -0500
> Reply-To: [EMAIL PROTECTED]
> 
> 
> I'm running RH 7.1.  The box has dual NICs.  Right now it has two IP
> addresses -- some websites are hardcoded to one, some to the other.  Should
> I look into channel-bonding the ethernet cards?  What's the benefit?  Has
> anyone tried this?
> 
> Thanks!
> 
> 
> 
> 
> --__--__--
> 
> Message: 7
> Date: Thu, 24 Oct 2002 15:14:28 -0400
> From: Darryl Darling <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Sound problems with 2.4.18-17.8.0 kernel
> Reply-To: [EMAIL PROTECTED]
> 
> After I updated my RedHat 8.0 system with this kernel I cannot get any 
> sound.  I am using a Dell C600 with Maestro 3i sound hardware.  If I use 
> the GNOME desktop my system locks up after less than 10 minutes of use - 
> KDE works fine but with no sound.  I was getting a "chip lockup?" 
> message when I shutdown but that is not happening any more.  It was very 
> similar to this:
> 
>     chip lockup? dmasz 65536 fragsz 8192 count 65536 hwptr 0 swptr 0  
> 
> Anybody got an idea of what I can do to get the sound working with the 
> new kernel.  I am booting to the 2.4.18-14 kernel right now.  
> 
> Thanks
> Darryl
> 
> 
> 
> 
> --__--__--
> 
> Message: 8
> Date: Thu, 24 Oct 2002 13:07:27 -0600
> From: "Ashley M. Kirchner" <[EMAIL PROTECTED]>
> Organization: Photo Craft Laboratories, Inc.
> To: Red Hat Mailing List <[EMAIL PROTECTED]>
> Subject: 7.3 vs 8.0
> Reply-To: [EMAIL PROTECTED]
> 
> 
>     As I'm rebuilding several of my servers, I'm wondering if I should consider
> RH8.0, or whether I should stick to 7.3.  Past experience has taught me to wait
> for a .1 or .2 release, and I'm wondering if that's still the case with 8.0.
> Anyone care to comment?
> 
> --
> W | I haven't lost my mind; it's backed up on tape somewhere.
>   +--------------------------------------------------------------------
>   Ashley M. Kirchner <mailto:ashley@;pcraft.com>   .   303.442.6410 x130
>   IT Director / SysAdmin / WebSmith             .     800.441.3873 x130
>   Photo Craft Laboratories, Inc.            .     3550 Arapahoe Ave. #6
>   http://www.pcraft.com ..... .  .    .       Boulder, CO 80303, U.S.A.
> 
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 9
> Date: Thu, 24 Oct 2002 15:37:58 -0500 (CDT)
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Subject: help with firewall setup
> Reply-To: [EMAIL PROTECTED]
> 
> I did a minimal install of 7.2 on a machine to act as a router and 
> firwall and router. I used up2date and have everything current so the
> internet connection works. I can ping the isp dns ipaddress from both
> linux and windows computers but I can not use internet explorer or
> netscape to view websites neither can find the server. Also fetchmail
> gives a DNS error message about not finding pop.earthlink.net. I have
> the nameserver in the /etc/resolv.conf files. I have forwarding turned 
> on and this is my ipchains file on the firewall. 
> # Firewall configuration written by lokkit
> # Manual customization of this file is not recommended.
> # Note: ifup-post will punch the current nameservers through the
> #       firewall; such entries will *not* be listed here.
> :input ACCEPT
> :forward ACCEPT
> :output ACCEPT
> -A input -s 0/0 -d 0/0 -i lo -j ACCEPT
> -A input -s 207.69.188.185 53 -d 0/0 -p udp -j ACCEPT
> -A input -s 207.69.188.186 53 -d 0/0 -p udp -j ACCEPT
> -A input -s 207.69.188.187 53 -d 0/0 -p udp -j ACCEPT
> -A input -s 0/0 -d 0/0 -p tcp -y -j REJECT
> -A input -s 0/0 -d 0/0 -p udp -j REJECT
> #enable simple IP forwarding and Masqurading
> -P forward DENY
> -A forward -i ppp0 -s 192.168.1.1/32 -j MASQ
> -A forward -i ppp0 -s 192.168.1.2/32 -j MASQ
> -A forward -i ppp0 -s 192.168.1.6/32 -j MASQ
> -A forward -i ppp0 -s 192.168.1.8/32 -j MASQ
> -A forward -i ppp0 -s 192.168.1.9/32 -j MASQ
> 
> Does anyone have any idea what I need to do to get this setup to work?
>              Thanks
>               Linda Hanigan
> 
> 
> 
> 
> --__--__--
> 
> Message: 10
> Date: Thu, 24 Oct 2002 12:11:47 -0700
> From: Daniel Goldin <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: html mail
> Reply-To: [EMAIL PROTECTED]
> 
> On (10/24/02 11:58), Vidiot wrote:
> > 
> > >If you use a good old Linux mailer like mutt and w3m to process html
> > >mail and procmail to sort mailing lists instead of using a digest--it
> > >all comes out looking like vanilla text. Since I switched to mutt, I
> > >no longer seethe with irritation over html mail. Far easier to deal
> > >with it on your end (you can) than to pursuade the great big
> > >ever-expanding world to follow precise email etiquette (they won't).
> > 
> > I use elm.  When I read text/html messages, I get the text portion.  When
> > the idiotic user only sends HTML e-mail, it is shown to me as raw HTML,
> > since there was a MIME enclosed plain text portion.  When I respond to
> > combo text/html, I am given the whole message, which looks like crap.
> > 
> > How does mutt handle html only e-mail.  How does mutt handle replying to
> > combo plaintext/html e-mail?
> > 
> > BTW, you could have trimmed the html e-mail example.  Leaving all that
> > crap in a response is as bad as sending out html e-mail.
> 
> You need to put some stuff in your mailcap file and in your
> .muttrc. If you're interested I could send you my settings. Replying
> works as though you're replying to text, if you set things up right.
> 
> Html only email works the same way. The program calls w3m to open the
> email in the pager window. For me, Mutt has taken the very real
> frustration out of html messages.
> 
> 
> 
> -- 
> Daniel Goldin
> 323.225.1926
> [EMAIL PROTECTED]
> 
> 
> 
> 
> --__--__--
> 
> Message: 11
> Date: Thu, 24 Oct 2002 21:19:48 +0200
> From: Michael Schwendt <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: How do you reset up2date db?
> Reply-To: [EMAIL PROTECTED]
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Thu, 24 Oct 2002 10:17:02 -0700 (PDT), [EMAIL PROTECTED] wrote:
> 
> > I got booted out of up2date due to some errors.
> > When I try to do an up2date again it thinks it's already finished.
> > I get the following message: None of the packages you requested were 
> > found, or they are already updated.
> > How do I reset the db?
> 
> The db is "rpm -qa".
> 
> Can you name any particular package which you think is still waiting
> for you at RHN? Double-check with "rpm -q pkgname" whether it is
> installed.
> 
> Also log in at https://rhn.redhat.com and see what is reported
> there.
> 
> - -- 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> 
> iD8DBQE9uEfU0iMVcrivHFQRAnsjAJ41o3os7J9mPK6gWnIMfLWwV7g3tQCfc9Xv
> vsQofhSHpOTdxQ0NxxlG4UE=
> =mei2
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> --__--__--
> 
> Message: 12
> Date: Thu, 24 Oct 2002 21:21:20 +0200
> From: Michael Schwendt <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: RH 8.0 - Security Level Configuration
> Reply-To: [EMAIL PROTECTED]
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Thu, 24 Oct 2002 11:48:04 -0700, Daniel Ling wrote:
> 
> > I downloaded RH Linux 8.0 from one of the mirror sites a few  weeks
> > ago. I installed it on my desktop (P4 - 1.8GHz processor). The
> > installation (Server installation) went smoothly. It seems to work
> > well except that  when I attempt to change  the Security Level
> > Configuration from High to Medium or No Firewall, it always stay at
> > High no matter what I do. I even reinstalled RH Linux 8.0 on the same
> > machine, explicitly picked "No Firewall" option during the
> > installation. I eventually ended up with "High" Security Level anyway.
> > That makes me wonder whether the RH Linux 8.0 - downloaded version is
> > restricted toHigh Security Level option only. Anyone has any similar
> > experinece? How can I resolve this?
> 
> It doesn't remember your settings, regardless of whether you save
> them or not. It always starts at "high" and from scratch.
> 
> - -- 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> 
> iD8DBQE9uEgw0iMVcrivHFQRAg3MAJ0fhfT4Uz37L3fjJImYH1U1mV14LACfQyW5
> 1+kgDbLgZcy0vjpfhL02nkM=
> =1smE
> -----END PGP SIGNATURE-----
> 
> 
> 
> 
> --__--__--
> 
> Message: 13
> Subject: Re: Changing the default browser
> From: Joe Giles <[EMAIL PROTECTED]>
> To: Red Hat List <[EMAIL PROTECTED]>
> Date: 24 Oct 2002 13:38:54 -0600
> Reply-To: [EMAIL PROTECTED]
> 
> Yeah, I changed that already. That is for system links. I'm referring to
> Evolution. When I click on a link inside an e-mail address, it opens
> Mozilla. I want it to open Netscape. I was thinking about a setting in
> Evolution, but I can't find one. Maybe a Gnome setting?
> 
> Thanks for the reply :)
> 
> Joe
> 
> On Thu, 2002-10-24 at 12:45, mark wrote:
> > On Thursday 24 October 2002 01:15 pm, Joe is done writ:
> > > How would one change the default browser in Linux?
> > > So, when Evolution opens up a link, it opens Netscape instead of
> > > Mozzila.
> > 
> > It took me long enough to find this answer. Control Center->file 
> > browsing->file associations->text, and then select html, shtml, and any other 
> > thing that hits your fancy (.swf for flash, etc), and, if mozilla isn't in 
> > the list, add it, then use the "up" to make sure that it's at the top of the 
> > list.
> > 
> > Th'-th'-th-that's all, f-f-f-folks!
> > 
> >     mark
> > 
> > -- 
> > A horned and tusked purple thing went racing along the 
> > ridge to my right pursued by a hairless orange-skinned 
> > creature with long claws and a forked tail.  Both were 
> > wailing in different keys.
> > 
> > I nodded.  It was just one damned thing after another.
> > 
> > 
> >               - from _Trumps of Doom_ by Roger Zelazny
> > 
> > 
> > 
> > -- 
> > redhat-list mailing list
> > unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
> > https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 
> 
> 
> 
> --__--__--
> 
> Message: 14
> Subject: RE: html email
> Date: Thu, 24 Oct 2002 15:36:47 -0400
> From: "Joshua P. Metcalf" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Reply-To: [EMAIL PROTECTED]
> 
> *I'm**so**confused**by**all**of**this*
> 
> Josh
> 
> -----Original Message-----
> From: mark [mailto:whitroth@;enteract.com] 
> Sent: Thursday, October 24, 2002 2:39 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: html email
> 
> On Thursday 24 October 2002 01:15 pm,  Daniel Goldin is done writ:
> > David Wheeler is a self-professed Linux newbie, attempting to 
> > install Redhat for the first time. Singling him out--however 
> 
> I did *not* single him out. I *said* that his was there, and I didn't,
> in 
> fact, mention that it was the most egregious html mail in several
> digests. I 
> chose that specifically for being, also, as long as it was, to drive
> home to 
> those who read this list just why the rest of us are complaining, *NOT*
> to 
> attack Mr. Wheeler. I'm just *trying* to give them a clue that means 
> something.
> 
> This was not a "breach of Nettiquite. Go find the Netiquitte FAQ. I did
> not 
> flame *either* Mr. Wheeler, nor anyone else. I made no personal attacks.
> In 
> fact, if you found fault with what I said, I'd say that it was more 
> appropriate for you, Mr. Goldin, to email me directly. Also, as another 
> poster mentioned, there was no reason not to edit your post, so as to
> cut out 
> my very long example. That, in fact, is a breach of Nettiquite, which
> says 
> that one should cut out items that do not directly relate to putting
> your 
> message in context.
> 
> If you would like to talk about this further, please - let's take it
> offline. 
> Email me at <[EMAIL PROTECTED]>. Note that I have cc'd you, as well
> as 
> posted to the list. This should *not* be about acrimony, but about the 
> appropriate strategy and tactics to teach newbies about the culture
> they're 
> coming into.
> 
> Oh, and btw, I read my email these days in kmail. I have "view email as
> html" 
> explicitly turned off, so that (and I am *not* referring to anyone here,
> but 
> to my daily dose of spam) some idiot's frivolous javascript, or extreme
> M$ 
> extensions that nothing but vx.xxx of IE will render, will not crash
> kmail.
> 
> Again, it's all about content, not style.
> 
>       mark
> 
> 
> 
> -- 
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 
> 
> 
> --__--__--
> 
> Message: 15
> Date: Thu, 24 Oct 2002 22:47:51 +0300
> From: aljuhani <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: RE: help with firewall setup
> Reply-To: [EMAIL PROTECTED]
> 
> Hello,
> 
> You need some accept rules for tcp, udp, and ICMP, see example below:
> 
> eth0 is your interface.
> 
> ===EXAMPLE RULES===
> # TCP 
> # serve ftp for NON-passive clients_ONLY_ 
> -A input -i eth0 -p tcp --destination-port 20:21 --syn -j ACCEPT -l 
> # serve ssh - 22 
> -A input -i eth0 -p tcp --destination-port 22 --syn -j ACCEPT -l 
> # serve smtp - 25 
> -A input -i eth0 -p tcp --destination-port 25 --syn -j ACCEPT 
> # serve http - 80 
> -A input -i eth0 -p tcp --destination-port 80 --syn -j ACCEPT 
> # serve https admin - 81 
> -A input -i eth0 -p tcp --destination-port 81 --syn -j ACCEPT -l 
> # serve pop3 - 110 
> -A input -i eth0 -p tcp --destination-port 110 --syn -j ACCEPT 
> # disallow SYN on all else 
> -A input -i eth0 -p tcp --syn -j DENY -l
> 
> #allow gateway 
> -A input -i eth0 --source xxx.xx.xxx.x -j ACCEPT 
> # allow existing TCP sessions to continue 
> -A input -i eth0 -p tcp -j ACCEPT
> 
> # UDP 
> # DNS response 
> -A input -i eth0 -p udp --source xxx.xxx.xxx.xxx 53 -j ACCEPT 
> -A input -i eth0 -p udp --source xxx.xxx.xxx.xxx 53 -j ACCEPT
> 
> 
> # ICMP allowed 
> -A input -i eth0 -p icmp -j ACCEPT
> 
> 
> # disallow all else 
> -A input -i eth0 -j DENY -l
> 
> ======END OF EXAMPLE RULES=======
> 
> BTW what is the firewall you are using.
> 
> Please note that DNS RESPONSE above where IP is xxx.xxx.xxx.xxx. These IPs for 
> your name servers at your ISP or at your server if you are running your own 
> DNS.
> 
> Regards,
> 
> Al-Juhani
> [EMAIL PROTECTED]
> 
> 
> >===== Original Message From [EMAIL PROTECTED] =====
> >I did a minimal install of 7.2 on a machine to act as a router and
> >firwall and router. I used up2date and have everything current so the
> >internet connection works. I can ping the isp dns ipaddress from both
> >linux and windows computers but I can not use internet explorer or
> >netscape to view websites neither can find the server. Also fetchmail
> >gives a DNS error message about not finding pop.earthlink.net. I have
> >the nameserver in the /etc/resolv.conf files. I have forwarding turned
> >on and this is my ipchains file on the firewall.
> ># Firewall configuration written by lokkit
> ># Manual customization of this file is not recommended.
> ># Note: ifup-post will punch the current nameservers through the
> >#       firewall; such entries will *not* be listed here.
> >:input ACCEPT
> >:forward ACCEPT
> >:output ACCEPT
> >-A input -s 0/0 -d 0/0 -i lo -j ACCEPT
> >-A input -s 207.69.188.185 53 -d 0/0 -p udp -j ACCEPT
> >-A input -s 207.69.188.186 53 -d 0/0 -p udp -j ACCEPT
> >-A input -s 207.69.188.187 53 -d 0/0 -p udp -j ACCEPT
> >-A input -s 0/0 -d 0/0 -p tcp -y -j REJECT
> >-A input -s 0/0 -d 0/0 -p udp -j REJECT
> >#enable simple IP forwarding and Masqurading
> >-P forward DENY
> >-A forward -i ppp0 -s 192.168.1.1/32 -j MASQ
> >-A forward -i ppp0 -s 192.168.1.2/32 -j MASQ
> >-A forward -i ppp0 -s 192.168.1.6/32 -j MASQ
> >-A forward -i ppp0 -s 192.168.1.8/32 -j MASQ
> >-A forward -i ppp0 -s 192.168.1.9/32 -j MASQ
> >
> >Does anyone have any idea what I need to do to get this setup to work?
> >             Thanks
> >              Linda Hanigan
> 
> 
> 
> 
> 
> --__--__--
> 
> __
> redhat-list mailing list
> Unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 
> End of redhat-list Digest




-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to