I now have ssh connection thru Konqueror between the following PCs, but no 'net sharing.

PC1 Mandriva 2005LE
eth0 is NIC --> DSL modem configured as DHCP dynamic during setup
eth1 is NIC -->hub --> PC2 confgured as static (192.168.10.1)

PC2 Mandrake 10.0
eth0 is NIC -->hub-->PC1 configured as static (192.168.10.2)

Have tried internet sharing with MCC on PC1, but the Mandriva documentation does not help by saying "fill out these boxes with info from your administrator".

I have set these up using GUI and have heard it is not good to mix with CL. If I alter the static network to DHCP for internet sharing I lose the ssh connection.

Any help appreciated
Thanks

hi,

to sharing DSL you must active routing.

the routing is the relation on eth0 and eth1

after on your PC2, setup the gateway and put => 192.168.10.1
setup DNS primary and secondary of your ISP in the Configuration IP on PC2

(excuse for my bad english :$ )

So you're trying to run the internet connection sharing wizard right? What information is it asking for that you don't know?

What have you setup using GUI? The static IP addresses? If so then there's nothing wrong with using GUI config tools. However the internet connection sharing wizard is another matter - it will probably change your network to use 192.168.1.x addresses. However unless you have a particular attachment to the 192.168.10.x addresses this is fine and shouldn't matter.

Then you aren't setting up DHCP right, this is why its easier to use the internet connection sharing wizard because it does all this for you.

I used the wizards for both the LAN connection ( dynamic) to DSL modem and on each PC for each NIC (static) to the hub.
I used 192.168.10.x because when I used 192.168.0or1.x, I lost my internet connection, so I went back.

I also used the wizard for the internet sharing in MCC but must have inserted incorrect info. Wizard asks for interface connected to net then recommends ppp+ but offers to put either ppp+ or my eth0. I have tried both. Later it asks for interface to internal network, so I insert eth1, then it gives warning about eth1 already configured, but did it anyway. Then I lose the ssh connection until I reconfig everything back.

Any help appreciated.
Thanks

To setup internet connection sharing you have to setup shorewall. Show what's in your /etc/shorewall/policy, /etc/shorewall/interfaces, /etc/shorewall/zones and /etc/shorewall/masq files (you can strip out the commented instructions that take up most of those files).

Thanks for the help. At this point my internet sharing is now working, but am confused as to why.
Played around with iptables, routing , etc for a while, but I got the urge to look into firewall.
MCC has a question under firewall: Which services would you like the internet to connect to?

And a checkbox for "everything" (no firewall). You would think that this setting would allow for open and free networking and sharing, but apparently not. As soon as I unchecked this, and checked DNS, webserver and echo request, I had internet sharing with my PC2.

Can someone please explain how this firewall checkbox list works? MCC documentation doesn't cut it.

Also, under MCC security, I could swear there were permissions , user, and firewall settings. Now I only have firewall. Is this MDV 2005LE defaults, and am I thinking of MDK 10.0?

Thanks

The firewall configuration system (shorewall) has a lot to do with the internet sharing - pretty much all the settings for it are in shorewall so it makes a kind of sense that if you disable the firewall it doesn't work. It also makes sense from a security POV. Now that it's working you should disable web and dns in shorewall because its only for incoming - something which you don't want unless you're running a web server.

If for some reason you want to browse the net without any firewall you should still keep shorewall enabled. Just edit the /etc/shorewall/policy file to ACCEPT all all. But be aware that this is a very BAD IDEA.

I guess if you put it that way then it makes sense that if internet sharing is controlled by shorewall and you shut it off then you won't have sharing, but that is not how the MCC appears to newbs. It says if you want the PC to connect to everything, then check the box to initiate no firewall. That seems to be poorly worded. Any good tutorials on shorewall?

thanks

Agreed - their firewall interface is crap. Its confusing (the 'everything' thing) and it makes it hard to impossible to do anything beyond the most basic configuration of the firewall.

http://www.shorewall.net/Documentation_Index.html esp. see the Quickstart Howtos.