[aclug-L] Re: debian, ppp, and ipmasq
[Top] [All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
to use ip masquerading (NAT) you must do some configurations with ipchains
to set up the rules by which it works.
I assume you are using a private IP network at home and that you are using
the NAT to allow the local hosts access to the internet via masquerading.
I have 2 NICs, one connects to the internet and the other to my local LAN.
in the ipchains rules I have done 2 lines to enable it to work flawlessly.
ipchains -P forward DENY
ipchains -A forward -j MASQ -s 192.168.2.0/24 -d 0.0.0.0/0
This will work in any dynamically or statically assigned address scheme
because of the default routing.
for more information read up on ipchains, masquerading, and firewalls.
----- Original Message -----
From: Jeremy King <soapboxalpha@xxxxxxxxx>
To: <discussion@xxxxxxxxx>
Sent: Friday, December 08, 2000 1:21 PM
Subject: [aclug-L] debian, ppp, and ipmasq
>
> I just finished installing debian (2.2) on a little
> box for use as a gateway (NAT over a ppp connection)
> for my home LAN. I got ppp running to do an ftp
> installation. However, after completing the install,
> the ppp ceased to function. I was getting this error
> message from pppd:
>
> > cannot determine ethernet address for proxy ARP
>
> I removed ipmasq, which totally eliminated the error
> and my ppp connection problems. Since ipmasq is the
> whole reason I'm setting up this box, could someone
> explain to me what is causing the problem?
>
> I got the impression from the ipmasq package
> description in dselect that ipmasq is basically set up
> to work without further configuration. Is this not
> true, or am I missing something?
>
> Thanks,
> Jeremy
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Shopping - Thousands of Stores. Millions of Products.
> http://shopping.yahoo.com/
>
> -- This is the discussion@xxxxxxxxx list. To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
>
-- This is the discussion@xxxxxxxxx list. To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
|
|