HOW do you set up named in FC3

Sayon_6 · 08-06-2006, 03:37 PM

I want to browse the web also by not using a proxy. How do I set up my FC 3 server to enable me to do that ???

isuck@linux · 08-06-2006, 03:52 PM

what is the problem and what do you want? Be more specific don'w understand what's the problem.

lazlow · 08-06-2006, 04:00 PM

Sayon

Be aware that support for FC3 will be dropped when fc6 is released (oct?)

How are you hooked to the internet? Be specific. What platform?

lazlow

Sayon_6 · 08-08-2006, 10:34 AM

Like i said , all i want is to browse the internet w/o using a proxy.

This is my setup:

FC 3 Server (maybe I will move to FC 4 soon who knows but not now)
here i have:
ppp0 - on usb interface
eth0 - local LAN (several users connected to a switch)
eth1 - local lan (my own XP)

this is what I have in my iptables atm:
*nat
:PREROUTING ACCEPT [128822:8400558]
:POSTROUTING ACCEPT [42086:3038546]
:OUTPUT ACCEPT [36227:2730304]

-A POSTROUTING -s 192.168.0.0/24 -p tcp -m tcp -o ppp0 -j MASQUERADE
-A POSTROUTING -s 192.168.10.0/24 -p tcp -m tcp -o ppp0 -j MASQUERADE
-A POSTROUTING -s 192.168.10.0/24 -p tcp -m tcp -o ppp0 -j SNAT --to 86.xx.xx.xxx
COMMIT
# Completed on Thu Oct 4 19:18:03 2001
# Generated by iptables-save v1.2.1a on Thu Oct 4 19:18:03 2001
*mangle
:PREROUTING ACCEPT [7586906:2886668277]
:OUTPUT ACCEPT [5512364:1755032065]
COMMIT
# Completed on Thu Oct 4 19:18:03 2001
# Generated by iptables-save v1.2.1a on Thu Oct 4 19:18:03 2001
*filter
:INPUT ACCEPT [4775417:1008247829]
:FORWARD ACCEPT [1035372:55113614]
:OUTPUT ACCEPT [5532840:1762750529]
######Input chain#####
#ntp
-A OUTPUT -p udp --sport 123 --dport 123 -j ACCEPT

#named
-A INPUT -d 0/0 -s 0/0 -i eth0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -d 0/0 -s 0/0 -i eth0 -p udp -m udp --sport 53 -j ACCEPT

any idea what is wrong here ?

Sayon_6 · 08-08-2006, 04:22 PM

Yes i found what it was
It looks like in the #named section in my iptables

Quote:

#named
-A INPUT -d 0/0 -s 0/0 -i eth0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -d 0/0 -s 0/0 -i eth0 -p udp -m udp --sport 53 -j ACCEPT

there is no INPUT for my eth1.

But i still have not gotten the whole solution. I play online games that require so many ports opened i know there is a way of doing this by just adding for example :

Quote:

-A POSTROUTING -p tcp -s 0/0 --dport 2106 -o ppp0 -j SNAT --to 86.xx.xxx.xxx

but what is the correct way to do POSTROUTING to allow ALL tcp and udp ports and NAT-ing them to my 86.xx.xxx.xxx ?