Ok, Let's try again...
I found a distro that is really cool, beasead on Knoppix that is basead on Debian: Kurumin Linux.
I' Loved the apt-get and dpkg that is really cool...
Whell, this is my problem (again):
The Knoppix box is instaled on hd, and I have 2 interfaces:
eth0 - connected to ISP (that brings up ppp0 interface)
eth1 - connected to local lan with ip 192.168.0.10/24
The Windows XP box is 192.168.0.1/24
I Installed the last Iptables and squid and bind (named). The XP box can browse the internet via port 3128. Very fast than previous solution: Wingate + Win2000 Server.
The XP box can resolve dns addr on internet via dns in Linux box.
The Linux box can connect to internet and access ports 25 and 110.
The Windows XP cant' connect to any mail server from ISP: They can resolv the smtp server address but can't connect.
My question is: I need to modify squid, iptables, or what?
Any help (again) is very welcome!
MarcSant.
Here is a copy of my script that load iptables on startup:
# Firewall Script by: Carlos E. Morimotto
#
www.guiadoharware.net
#!/bin/bash
firewall_start(){
# open access for local lan
iptables -A INPUT -p tcp --syn -s 192.168.0.0/255.255.255.0 -j ACCEPT
# drop pings
echo "1" > /proc/sys/net/ipv4/icmp_echo_ignore_all
# Protect for trojans, DOS, and others stupid things
iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
iptables -A FORWARD -p tcp -m limit --limit 1/s -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT
iptables -A FORWARD --protocol tcp --tcp-flags ALL SYN,ACK -j DROP
iptables -A FORWARD -m unclean -j DROP
# open loopback interface
iptables -A INPUT -p tcp --syn -s 127.0.0.1/255.0.0.0 -j ACCEPT
# drop all other stuff
iptables -A INPUT -p tcp --syn -j DROP
# user message
echo "Starting Firewall..."
sleep 2
echo "OK."
}
firewall_stop(){
iptables -F
iptables -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
}
case "$1" in
"start")
firewall_start
;;
"stop")
firewall_stop
echo "Stopping Firewall..."
sleep 2
echo "OK."
;;
"restart")
echo "Stopping Firewall..."
sleep 1
echo "OK."
firewall_stop; firewall_start
;;
*)
iptables -L -n
esac
