IP Masq Under 2.1.88+

root (root@hill-b-073.resnet.purdue.edu)
Mon, 23 Mar 1998 07:07:19 -0500 (EST)


Under 2.0.33 my Masq functions without error. However, from the subjet
you might guess, I am having problems under 2.1.88+ (I haven't tried
anything else). Under the tcp/ip section in make config, this is what is
compiled

TCP/IP networking (CONFIG_INET) [Y/n/?]
IP: multicasting (CONFIG_IP_MULTICAST) [N/y/?]
IP: advanced router (CONFIG_IP_ADVANCED_ROUTER) [N/y/?]
IP: kernel level autoconfiguration (CONFIG_IP_PNP) [N/y/?]
IP: firewalling (CONFIG_IP_FIREWALL) [Y/n/?]
IP: firewall packet netlink device (CONFIG_IP_FIREWALL_NETLINK) [N/y/?]
IP: firewall packet logging (CONFIG_IP_FIREWALL_VERBOSE) [Y/n/?]
IP: transparent proxy support (CONFIG_IP_TRANSPARENT_PROXY) [N/y/?]
IP: always defragment (CONFIG_IP_ALWAYS_DEFRAG) [Y/n/?]
IP: accounting (CONFIG_IP_ACCT) [Y/n/?]
IP: masquerading (CONFIG_IP_MASQUERADE) [Y/n/?]
*
* Protocol-specific masquerading support will be built as modules.
*
IP: ICMP masquerading (CONFIG_IP_MASQUERADE_ICMP) [Y/n/?]
*
* Protocol-specific masquerading support will be built as modules.
*
IP: ipautofw masq support (EXPERIMENTAL) (CONFIG_IP_MASQUERADE_IPAUTOFW)
[N/y/m/?]
IP: ipportfw masq support (EXPERIMENTAL) (CONFIG_IP_MASQUERADE_IPPORTFW)
[N/y/m/?]
IP: optimize as router not host (CONFIG_IP_ROUTER) [N/y/?]
IP: tunneling (CONFIG_NET_IPIP) [N/y/m/?]
IP: GRE tunnels over IP (CONFIG_NET_IPGRE) [N/y/m/?]
IP: aliasing support (CONFIG_IP_ALIAS) [N/y/?]
IP: ARP daemon support (EXPERIMENTAL) (CONFIG_ARPD) [N/y/?]
IP: TCP syncookie support (not enabled per default) (CONFIG_SYN_COOKIES)
[Y/n/?]
*
* (it is safe to leave these untouched)
*
IP: Reverse ARP (CONFIG_INET_RARP) [N/y/m/?]
IP: Drop source routed frames (CONFIG_IP_NOSR) [Y/n/?]
IP: Allow large windows (not recommended if <16Mb of memory)
(CONFIG_SKB_LARGE)[Y/n/?]
The IPv6 protocol (EXPERIMENTAL) (CONFIG_IPV6) [N/y/m/?]

This is what I have under my script that is executed at boot time to
enable the IP Masq fwadmin rules

#!/bin/sh
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0

Any suggestions?

-root@hill-b-73.resnet.purdue.edu

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu