MNF Setup

apoc63 · 11-29-2004, 05:53 PM

I just installed MNF, i have eth1 connected to network and eth0 to cable modem. I an access eth1 from network but eth0 isnt bring down an IP from cable modem. So i cant get connected to internet with MNF. What should i try to get this to work is there anything else you guys need to know i would appreciate any help you could give me

Capt_Caveman · 12-05-2004, 02:25 PM

Sounds like a standard networking issue rather than a security one. Moving thread to the Linux - Networking forum to get more exposure. It would likely help if you posted the specifics of your cable, specifically what protocol does it use, standard dhcp or something else like PPPoE?

apoc63 · 12-06-2004, 12:19 AM

Thank you ill post on networking

apoc63 · 12-06-2004, 12:23 AM

OK, I am able to ping webpages from the linux box. I still dont know how to get the other pcs on my network to access the internet.

eth0 is pulling down an IP
eth1 is 10.168.10.x with same subnet as mynetwork.

what do i need to do inorder to get network users to be able to access teh internet? What do you need to know if anything to help me resolve this problem

Capt_Caveman · 12-06-2004, 12:51 AM

Is the linux box acting as a gateway for the other PCs (how are they physically connected)?

If the linux box is the gateway for the other PCs, then you need to configure IP Masquerading and IP forwarding as follows.

Code:

Maquerading is done by:
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

IP forwarding is done by:
iptables -I FORWARD -i eth1 -j ACCEPT
iptables -I FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT

You may also need:
echo "1" > /proc/sys/net/ipv4/ip_forward

Post the output of iptables -vnL if that doesn't work.

apoc63 · 12-06-2004, 04:42 PM

How do i enter those? There is a text file already inside of MNF right that i have to add that to or do i create another

Capt_Caveman · 12-06-2004, 09:39 PM

I don't use MNF so I'm not that familiar with it, but looking at the docs, in the main setup interface select "Firewall Rules". Then click the Masq NAT sub heading. In the Masq NAT page, select the "Classical NAT Add Masq button". Note that this may require you going through it like a "Setup Wizard" rather than specifically selecting each tab (I can't tell from the docs). Once the Classical NAT menu opens, enter the following:

In "Maqueraded Network box": enter 10.168.10.0/24 (or whatever your LAN is)
In "Through Interface box": enter eth1
In SNAT box: If you have a static public IP address you can enter it here. If your IP is dynamic or if you are unsure, leave it blank and let it do true masquerading,

In the Default policies section, make sure that there is a rule for "Client Zone" of LAN and "Server Zone" of WAN that is set to accept. This should allow all outbound traffic to pass out of the network. Click Save/Apply. I think that should automagically turn on ip_forwarding as well.

The documentation for this whole process is actually rather good, so I would highly recommend taking a look at it first and use it as a reference if you get lost or confused. Specifically pgs 74-81 from the MNF-User doc available here:
http://doc.mandrakelinux.com/Mandrak...n/MNF-User.pdf