[Fwd: Are these settings of ip forward ok??]

Xie Huagang (xhg@frost.ncic.ac.cn)
Wed, 28 Oct 1998 15:41:36 +0800


This is a multi-part message in MIME format.
--------------81EF337E14ACE916DA38EF60
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 7bit

--------------81EF337E14ACE916DA38EF60
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Message-ID: <3636CA96.46F93EE7@frost.ncic.ac.cn>
Date: Wed, 28 Oct 1998 15:41:10 +0800
From: Xie Huagang <xhg@frost.ncic.ac.cn>
Organization: NCIC
X-Mailer: Mozilla 4.05 [en] (X11; I; Linux 2.0.34 i686)
MIME-Version: 1.0
To: SLP <aromes@microtec.net>
Subject: Re: Are these settings of ip forward ok??
References: <3.0.5.32.19981028001744.007e3100@pop.microtec.net>
Content-Type: text/plain; charset=gb2312
Content-Transfer-Encoding: 7bit

> I ve setted following parameters in /etc/rc.d/rc.local:
> ipfwadm -F -p deny
> ipfwadm -F -a m -S 192.168.1.2/24 -D 0.0.0.0/0
> ipfwadm -F -a m -S 192.168.1.3/24 -D 0.0.0.0/0

ipfwadm -F -a m -S 192.168.1.2ipfwadm -F -a m -S 102.168.1.3
# did u set the following policy for Input Firewall and Output Firewall ??
ipfwadm -I -p accept
ipfwadm -O -p accept

after u change the /etc/sysconfig/network , you should restart the network by
run
# /etc/rc.d/init.d/network stop
# /etc/rc.d/init.d/network start

you can see the message of " ip forward is on" or else..

> In /etc/sysconfig/network:
> networking is yes and IPV4 is true.
> Now, my main question:
> #In /proc/net/ip_forward I have:
> IP firewall forward rules default 0
> (Is that OK?? when it's 4..what does that mean??)
> Then I have things like (still in /proc/net/ip_forward):
> 0A80100 FFFFF0->00000 00000-00 204 0 00 0 0$
> 0A80100 FFFFF0->00000 00000-00 204 0 00 0 0$
> (for both last lines, I guess that 's correct..just referring to
> the ipfwadm parameters in /etc/rc.d/rc.local.

--
Name   : Xie Hua Gang                   Email   : xhg@frost.ncic.ac.cn

--------------81EF337E14ACE916DA38EF60--

- To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.rutgers.edu