LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 06-24-2005, 02:00 PM   #1
-=dionis=-
LQ Newbie
 
Registered: Jun 2005
Location: EU
Posts: 3

Rep: Reputation: 0
Angry routing/gateway/masquerade help wanted


Hi there,

I have a FC3 box (without X), which have two adapters (eth0 and eth1).
I like use my linux box like router/gateway to internet for my second box with windows 2000.

Linux FC3 (eth0, eth1)------ISP--->
|
|----windows 2000


My linux box work fine. Problem is what I can't access to web pages, email, msn, etc. on internet from my windovs 2000 computer. But ICQ can connect to inetrnet from my windows box.
I have a lot serach on google and different forums, but can't solve my problem. I have also try quicktables script and it also no get me connect to internet from my windows box.

I have use this simple script which run by rc.local

-----------------------------------------------

#!/bin/bash

# Load useful kernel modules
modprobe ip_conntrack
modprobe ip_conntrack_ftp
modprobe ip_conntrack_irc
modprobe ip_nat_ftp
modprobe ipt_MASQUERADE

# Disabling ECN if enabled (explicit congestion notification
if [ -e /proc/sys/net/ipv4/tcp_ecn ]
then
echo 0 > /proc/sys/net/ipv4/tcp_ecn
fi

# Enabling forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

# AntiSpoofing protection
for x in lo eth0 eth1
do
echo 1 > /proc/sys/net/ipv4/conf/${x}/rp_filter
done

# Here is the place to define some variables

iptables="/sbin/iptables"
publicaddr="xx.xx.xx.xx" #here my static IP address
privateaddr="192.168.0.1"
any="0.0.0.0/0"
localnet="192.168.0.0/24"

#First, flushing the existing rules
iptables -F INPUT
iptables -F OUTPUT
iptables -F FORWARD
iptables -F -t nat


#Now defining the standard policy
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT


#Defining the real stuff !

# Allow access to the firewall from the localnet
iptables -A INPUT -s $localnet -d $privateaddr -j ACCEPT
iptables -A INPUT -s $localnet -d $publicaddr -j ACCEPT

# Allow access from ourself to us !
iptables -A INPUT -i lo -j ACCEPT

# Allow the firewall box to access the internet
iptables -A INPUT -s $any -d $publicaddr -m state --state ESTABLISHED,RELATED -j ACCEPT

# Should we masquerade the localnet to internet ?
iptables -t nat -A POSTROUTING -s $localnet -d $any -j MASQUERADE

-------------------------------------

and here is my etc/sysconfig/iptables :

---------------------------------------

# Firewall configuration written by redhat-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
--------------------------------------


Thanks in advance for your help.
Alex
 
Old 06-24-2005, 05:51 PM   #2
comprookie2000
Gentoo Developer
 
Registered: Feb 2004
Location: Fort Lauderdale FL.
Distribution: Gentoo
Posts: 3,291
Blog Entries: 5

Rep: Reputation: 54
Here is my stuff for Masquerading. For me eth0 connects to the WAN and eth1 to another box.
eth0 is a ethernet card with the address of 192.168.1.96 The default gateway for this box is 192.168.1.254 (the modems address)eth1 on this box is 192.168.0.1
crossover cable between the two;
Box two is set up with the ipaddress of 192.168.0.2 and its default gateway is 192.168.0.1 (Box one's eth1)
# iptables -F; iptables -t nat -F; iptables -t mangle -F
# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# echo 1 > /proc/sys/net/ipv4/ip_forward
# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -A INPUT -m state --state NEW -i ! eth0 -j ACCEPT
# iptables -A INPUT -p icmp -j ACCEPT
# iptables -P INPUT DROP

Last edited by comprookie2000; 06-24-2005 at 05:58 PM.
 
Old 06-25-2005, 02:54 AM   #3
-=dionis=-
LQ Newbie
 
Registered: Jun 2005
Location: EU
Posts: 3

Original Poster
Rep: Reputation: 0
I have same conf of my network and just try your script. it no give me any results
thanks for your help

Last edited by -=dionis=-; 06-25-2005 at 02:56 AM.
 
Old 06-25-2005, 05:11 AM   #4
DaneM
Member
 
Registered: Oct 2003
Location: Chico, CA, USA
Distribution: Linux Mint
Posts: 745

Rep: Reputation: 81
Hi, everybody.

Maybe this will help: http://www.ibiblio.org/pub/Linux/doc...TO-html.tar.gz

Download this, tar -zxvf <filename> and open it in your favorite browser. It worked for me.

Hope that helps.

--Dane
 
Old 06-25-2005, 08:17 AM   #5
-=dionis=-
LQ Newbie
 
Registered: Jun 2005
Location: EU
Posts: 3

Original Poster
Rep: Reputation: 0
Hi,
I have solve my problem.
It was my mistake, in my windows box I put DND server 192.168.0.1 , but correct I must put DNS's of my ISP
Thanks DaneM for your how to.
Thanks!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Firewall Security / Gateway Routing colabus Linux - Networking 1 09-14-2005 12:15 AM
Firewall Security / Gateway Routing colabus Linux - Security 3 09-09-2005 07:40 PM
Default Gateway Not Listed In Routing Table krazyace78 Linux - Networking 0 10-05-2004 01:09 PM
pppoe gateway routing problems jvannucci Linux - Networking 2 06-26-2003 07:40 PM
linux gateway/firewall with MASQUERADE willix Linux - Networking 2 08-06-2002 06:37 PM


All times are GMT -5. The time now is 05:45 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration