Re: tlug: IP Masquerading

[Kei Furuuchi <kfur@example.com>]

#
# Networking options
#
CONFIG_PACKET=y
CONFIG_NETLINK=y
CONFIG_RTNETLINK=y
CONFIG_NETLINK_DEV=y
CONFIG_FIREWALL=y
# CONFIG_NET_SECURITY is not set
CONFIG_FILTER=y
CONFIG_UNIX=y
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_RTNETLINK=y
CONFIG_NETLINK=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_MULTIPATH=y
CONFIG_IP_ROUTE_TOS=y
CONFIG_IP_ROUTE_VERBOSE=y
CONFIG_IP_ROUTE_LARGE_TABLES=y
CONFIG_IP_ROUTE_NAT=y
CONFIG_IP_PNP=y
# CONFIG_IP_PNP_BOOTP is not set
# CONFIG_IP_PNP_RARP is not set
CONFIG_IP_FIREWALL=y
CONFIG_IP_FIREWALL_NETLINK=y
CONFIG_NETLINK_DEV=y
CONFIG_IP_ALWAYS_DEFRAG=y
# CONFIG_IP_ROUTE_FWMARK is not set
CONFIG_IP_TRANSPARENT_PROXY=y
CONFIG_IP_MASQUERADE=y
CONFIG_IP_MASQUERADE_ICMP=y
CONFIG_IP_MASQUERADE_MOD=y
CONFIG_IP_MASQUERADE_IPAUTOFW=y
CONFIG_IP_MASQUERADE_IPPORTFW=y
CONFIG_IP_MASQUERADE_MFW=y
CONFIG_IP_ROUTER=y
CONFIG_NET_IPIP=y
CONFIG_NET_IPGRE=y
CONFIG_NET_IPGRE_BROADCAST=y
CONFIG_IP_MROUTE=y
CONFIG_IP_PIMSM_V1=y
CONFIG_IP_PIMSM_V2=y
CONFIG_IP_ALIAS=y
CONFIG_ARPD=y
CONFIG_SYN_COOKIES=y
CONFIG_INET_RARP=y
CONFIG_SKB_LARGE=y
# CONFIG_IPV6 is not set
CONFIG_IPX=y
CONFIG_IPX_INTERN=y
CONFIG_SPX=y
CONFIG_ATALK=y
# CONFIG_X25 is not set
# CONFIG_LAPB is not set
# CONFIG_BRIDGE is not set
# CONFIG_LLC is not set
# CONFIG_ECONET is not set
# CONFIG_WAN_ROUTER is not set
# CONFIG_NET_FASTROUTE is not set
# CONFIG_NET_HW_FLOWCONTROL is not set
# CONFIG_CPU_IS_SLOW is not set

#
# QoS and/or fair queueing
#
# CONFIG_NET_SCHED is not set
# CONFIG_CIPE is not set




Tetsuji Rai writes:
 > Kei Furuuchi <kfur@example.com> wrote
 > > I set :
 > > 
 > >         echo 1 > /proc/sys/net/ipv4/ip_forward
 > >         /sbin/ipchains -P forward DENY
 > >         /sbin/ipchains -A forward -j MASQ -s 192.168.0.0/24 -d 0.0.0.0/0
 > > 
 > > ipchains -L shows:
 > > 
 > >   Chain input (policy ACCEPT):
 > >   Chain forward (policy DENY):
 > >   target     prot opt     source                destination           ports
 > >   MASQ       all  ------  localnet/24           anywhere              n/a
 > > 
 > >   Chain output (policy ACCEPT):
 > > 
 > > And it seems working.
 > > 
 > Mine shows:
 > # ipchains -L
 > Chain input (policy ACCEPT):
 > Chain forward (policy DENY):
 > target     prot opt     source                destination           ports
 > MASQ       all  ------  10.0.0.0/8            anywhere              n/a
 > MASQ       all  ------  10.0.0.0/8            anywhere              n/a
 > Chain output (policy ACCEPT):
 > 
 > But it doesn't work.   Now I suspect my kernel config is wrong.  Will you show me your /usr/src/linux/.config ?
 > 
 > Thank you.
 > 
 > -- 
 > Tetsuji Rai    Tokyo Japan
 > PPL 2476457    tetsuji@example.com
 > Aviation Jokes: http://www.geocities.com/CapeCanaveral/Station/9416/
 > fax: +1-708-570-4868 (in the US)
 > 
 > 
-------------------------------------------------------------------
Next Nomikai: May 26 (Wed), 19:30                        Place: TBD
*** Special guest: Eric S. Raymond
Next Technical Meeting: June 12 (Sat), 12  :30   place: Temple Univ.
-------------------------------------------------------------------
more info: http://www.tlug.gr.jp        Sponsor: Global Online Japan