LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   Linux RH 7.2 Gateway Setup (https://www.linuxquestions.org/questions/linux-general-1/linux-rh-7-2-gateway-setup-12200/)

goatr 01-20-2002 03:22 PM

Linux RH 7.2 Gateway Setup
 
Hi All,
I'm putting together a Linux RH 7.2 Gateway Server. Here is the install that I'm using:

* Install the OS (RH 7.2)
* Set up Cards
192.168.1.150 255.255.255.0
166.70.X.150 255.255.255.128
* Update /etc/hosts
127.0.0.1 spain localhost.localdomain localhost
192.168.1.150 Interior
166.70.X.150 Exterior
198.60.X.2 DNS_1
198.60.X.22 DNS_2
* Add the Gateway to /etc/rc.d/rc.local
route add default gw 166.70.X.129
* Add Packet Forwarding to /etc/rc.d/rc.local
echo 1 > /proc/sys/net/ipv4/ip_forward
* Add the following line to /etc/hosts.allow
ALL:ALL
* Add the following line to /etc/host.conf
multi on

With these setting my server can ping all of the interior clients of my network, and my interior network can ping my server. My server can also ping all exterior clients, my interior clients can ping my exterior NIC card but nothing on the outside of my card.

Thankx for your help in advance,
Goatr Gerdes
jag@nffs.com
Network Admin

penseur2 01-20-2002 08:41 PM

routing
 
hi,

i 've had this prob.
see if you boot up network scripts , like
/etc/sysconfig/network-scripts/ifcfg-eth*
dont have a gateway set .
in any case do
route del default
and then do
route add default gw xx.xx.xx.xx

also diasble the RH bootup firewall , namely ipchains and iptables from
/usr/sbin/setup ---> system services.


all the best

DavidPhillips 01-20-2002 08:57 PM

your lan ip numbers are not routable on the internet,

without valid internet ip numbers for each machine you need to use ipmasq

this is the minimum firewall and ip_forward setting for it to work...

ipchains -P forward DENY
ipchains -A forward -i eth0 -j MASQ
echo 1 > /proc/sys/net/ipv4/ip_forward

DavidPhillips 01-20-2002 08:57 PM

You should see the ipchains Howto and check out the security forum for more firewall settings

goatr 01-23-2002 12:17 PM

Hi All,
Thankx to every how has been helping me out, I just the server set up and running. I didn't have Ip Masquerading on. Once I added an ipchains rule for it, it just started working.
Goatr


All times are GMT -5. The time now is 07:09 PM.