Re: ipchains diagnostics

2000-01-25 Thread Dänzer
--- Patrick Kirk <[EMAIL PROTECTED]> wrote: > > Would you mind explaining when to use 10.0.0.0/8 10.0.0.0/24 and > 10.0.0.0/32 With 10.0.0.0/24, the masquerading code will only forward from/to IPs 10.0.0.x, whereas with 10.0.0.0/8 10.x.x.x , which is probably what you want (although it escapes

Re: ipchains diagnostics

2000-01-25 Thread Dänzer
--- hypnos <[EMAIL PROTECTED]> wrote: > On Mon, 24 Jan 2000, Michel Dänzer wrote: > > > > /sbin/ipchains -A forward -s 10.0.0.0/24 -j MASQ > > > > The IP address looks funny. Sure it's private? > > That's the private Class A network address. It does > look like he is using a Class C network

Re: ipchains diagnostics

2000-01-25 Thread Patrick Kirk
Would you mind explaining when to use 10.0.0.0/8 10.0.0.0/24 and 10.0.0.0/32 as I never understand and don't know if using the wrong one will break anything. If its an RTFM situatiion, a pointer at a howto would be appreciated. Patrick > > /sbin/ipchains -A forward -s 10.0.0.0/24 -j MASQ > > Th

Re: ipchains diagnostics

2000-01-25 Thread hypnos
On Mon, 24 Jan 2000, Michel D?nzer wrote: > > /sbin/ipchains -A forward -s 10.0.0.0/24 -j MASQ > > The IP address looks funny. Sure it's private? That's the private Class A network address. It does look like he is using a Class C network 10.0.0 though. If not, it should be 10.0.0.0/8 instead.

Re: ipchains diagnostics

2000-01-24 Thread Dänzer
--- Patrick <[EMAIL PROTECTED]> wrote: > I can't get ipchains to work and get no error messages when I run > echo "1" > /proc/sys/net/ipv4/ip_forward > /sbin/ipchains -P forward DENY > /sbin/ipchains -A forward -s 10.0.0.0/24 -j MASQ The IP address looks funny. Sure it's private? Michel

Re: ipchains diagnostics

2000-01-24 Thread aphro
i assume your talking about ipmasq ? did u set the gateway of the other machines to the ip of the linux box? what happens exactly? make sure your using kernel 2.2 if yer usin ipchains nate On Mon, 24 Jan 2000, Patrick wrote: patric >I can't get ipchains to work and get no error messages when I

Re: ipchains diagnostics

2000-01-24 Thread Onno Ebbinge
At 01:56 PM 1/24/00 +, Patrick wrote: >ip masq is definately enabled in the kernel but not sure about ip forwarding. > >My real question is how can I diagnose the error. Where can I get a message >what setting I've missed as I know this is Operator Error. If 'ls /proc/sys/net/ipv4' yields a

Re: ipchains diagnostics

2000-01-24 Thread Patrick
ip masq is definately enabled in the kernel but not sure about ip forwarding. My real question is how can I diagnose the error. Where can I get a message what setting I've missed as I know this is Operator Error. Patrick

Re: ipchains diagnostics

2000-01-24 Thread Onno Ebbinge
IP forwarding and IP masq-ing are enabled in the kernel? Regards, Onno At 10:29 AM 1/24/00 +, Patrick wrote: >I can't get ipchains to work and get no error messages when I run >echo "1" > /proc/sys/net/ipv4/ip_forward >/sbin/ipchains -P forward DENY >/sbin/ipchains -A forward -s 10.0.0.0/24

ipchains diagnostics

2000-01-24 Thread Patrick
I can't get ipchains to work and get no error messages when I run echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/ipchains -P forward DENY /sbin/ipchains -A forward -s 10.0.0.0/24 -j MASQ How can I tell what's wrong? I see nothing in logs nor tail -f /var/log/messages. Patrick