[linux-help] Re: IP Alias, IP Masq, port forwarding
[Top] [All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index] [Thread Index]
I've experienced the exact same thing in regards to ifconfig not showing
eth0:1, etc... It worked for me in 2.0.x, but not 2.2.x... dunno why.
"ifconfig" alone does not show eth0:1, eth0:2, etc... if you do "ifconfig
eth0:1", it *does* show it, tho. My aliased devices work fine, tho, even
tho they don't by default show up in ifconfig's output.
Have you done: echo "1" > /proc/sys/net/ipv4/ip_forward?
On Wed, Feb 16, 2000 at 05:26:57PM -0600, Thomas Bloom wrote:
> I am having trouble with a new gateway/firewall box. It is running
> Debian 2.1
> Kernel 2.2.13
>
> The masq works, and the port forwarding work on the main dev eth0. The
> alias does not seem to be working. I add the entries for eth0:x
> devices,and I added the host route entries. The routes show up when the
> route command is issued, but when I type ifconfig the eth0:x devices do not
> show up. I can ping the aliased ip from the machine they are installed on,
> but I can't ping them from any other machine on the network
>
>
> ifconfig output
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Mask:255.0.0.0
> UP LOOPBACK RUNNING MTU:3924 Metric:1
> RX packets:48 errors:0 dropped:0 overruns:0 frame:0
> TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
> Collisions:0
>
> eth0 Link encap:Ethernet HWaddr 08:00:00:35:16:84
> inet addr:xxx.xxx.xxx.245 Bcast:xxx.xxx.xxx.255
> Mask:255.255.255.128
> UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
> RX packets:49344 errors:0 dropped:0 overruns:0 frame:0
> TX packets:11010 errors:0 dropped:0 overruns:0 carrier:0
> Collisions:11
> Interrupt:11 Base address:0x340
>
> eth1 Link encap:Ethernet HWaddr 08:00:00:30:87:36
> inet addr:192.168.1.254 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:2202 errors:0 dropped:0 overruns:0 frame:0
> TX packets:1 errors:0 dropped:0 overruns:0 carrier:0
> Collisions:0
> Interrupt:5 Base address:0x200
>
> eth2 Link encap:Ethernet HWaddr 08:00:00:00:49:64
> inet addr:192.168.2.254 Bcast:192.168.2.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:15970 errors:0 dropped:0 overruns:0 frame:0
> TX packets:5934 errors:0 dropped:0 overruns:0 carrier:0
> Collisions:127
> Interrupt:9 Base address:0x220
>
> eth3 Link encap:Ethernet HWaddr 08:00:00:80:31:30
> inet addr:192.168.3.254 Bcast:192.168.3.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:0 errors:0 dropped:0 overruns:0 frame:0
> TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
> Collisions:0
> Interrupt:10 Base address:0x300
>
>
>
>
> #! /bin/sh
> #
> # This file was automatically customized by debmake on Thu, 29 Jan 1998
> 16:20:37 -0800
> #
> # Written by Miquel van Smoorenburg <miquels@xxxxxxxxxxxxxx>.
> # Modified for Debian GNU/Linux by Ian Murdock <imurdock@xxxxxxxxxxxxxx>.
> # Modified for Debian by Christoph Lameter <clameter@xxxxxxxxxx>
>
> PATH=/bin:/usr/bin:/sbin:/usr/sbin
> DAEMON=/usr/sbin/ipmasqadm
> # The following value is extracted by debstd to figure out how to generate
> # the postinst script. Edit the field to change the way the script is
> # registered through update-rc.d (see the manpage for update-rc.d!)
> FLAGS="defaults 50"
>
> test -f $DAEMON || exit 0
>
> portfwrules () {
> #REPLACE WITH YOUR RULES
> echo -n
> ipmasqadm portfw -a -P tcp -L xxx.xxx.xxx.245 25 -R 192.168.2.252 25
> ipmasqadm portfw -a -P udp -L xxx.xxx.xxx.245 25 -R 192.168.2.252 25
> ipmasqadm portfw -a -P tcp -L xxx.xxx.xxx.245 110 -R 192.168.2.252 110
> ipmasqadm portfw -a -P udp -L xxx.xxx.xxx.245 110 -R 192.168.2.252 110
> ipmasqadm portfw -a -P tcp -L xxx.xxx.xxx.245 109 -R 192.168.2.252 109
> ipmasqadm portfw -a -P udp -L xxx.xxx.xxx.245 109 -R 192.168.2.252 109
> }
>
> case "$1" in
> start)
> portfwrules
> ;;
> stop)
> ipmasqadm portfw -f
> ;;
> restart|force-reload)
> ipmasqadm portfw -f
> portfwrules
> ;;
> *)
> echo "Usage: /etc/init.d/ipportfw {start|stop|restart|force-reload}"
> exit 1
> ;;
> esac
>
> exit 0
>
>
>
>
>
> /etc/init.d/network file
>
>
> #!/bin/sh
> ifconfig lo 127.0.0.1
> route add -net 127.0.0.0
>
> IPADDR0=xxx.xxx.xxx.245
> NETMASK0=255.255.255.128
> NETWORK0=xxx.xxx.xxx.128
> BROADCAST0=xxx.xxx.xxx.255
>
> IPADDR01=xxx.xxx.xxx.244
> NETMASK01=255.255.255.128
> NETWORK01=xxx.xxx.xxx.128
> BROADCAST01=xxx.xxx.xxx.255
>
> IPADDR02=xxx.xxx.xxx.243
> NETMASK02=255.255.255.128
> NETWORK02=xxx.xxx.xxx.128
> BROADCAST02=xxx.xxx.xxx.255
>
> IPADDR1=192.168.1.254
> NETMASK1=255.255.255.0
> NETWORK1=192.168.1.0
> BROADCAST1=192.168.1.255
>
> IPADDR2=192.168.2.254
> NETMASK2=255.255.255.0
> NETWORK2=192.168.2.0
> BROADCAST2=192.168.2.255
>
> IPADDR3=192.168.3.254
> NETMASK3=255.255.255.0
> NETWORK3=192.168.3.0
> BROADCAST3=192.168.3.255
>
>
> GATEWAY=xxx.xxx.xxx.254
>
> ifconfig eth0 ${IPADDR0} netmask ${NETMASK0} broadcast ${BROADCAST0} -promisc
> ifconfig eth0:1 ${IPADDR01} netmask ${NETMASK01} broadcast ${BROADCAST01}
> ifconfig eth0:2 ${IPADDR02} netmask ${NETMASK02} broadcast ${BROADCAST02}
>
> ifconfig eth1 ${IPADDR1} netmask ${NETMASK1} broadcast ${BROADCAST1}
> ifconfig eth2 ${IPADDR2} netmask ${NETMASK2} broadcast ${BROADCAST2}
> ifconfig eth3 ${IPADDR3} netmask ${NETMASK3} broadcast ${BROADCAST3}
>
> route add -net ${NETWORK0}
> route add -net ${NETWORK1}
> route add -net ${NETWORK2}
> route add -net ${NETWORK3}
>
> route add -host ${IPADDR01} dev eth0:1
> route add -host ${IPADDR02} dev eth0:2
>
> [ "${GATEWAY}" ] && route add default gw ${GATEWAY} metric 1
>
>
>
>
>
>
> kernel .config file
>
>
> #
> # Automatically generated by make menuconfig: don't edit
> #
>
> #
> # Code maturity level options
> #
> CONFIG_EXPERIMENTAL=y
>
> #
> # Processor type and features
> #
> # CONFIG_M386 is not set
> CONFIG_M486=y
> # CONFIG_M586 is not set
> # CONFIG_M586TSC is not set
> # CONFIG_M686 is not set
> CONFIG_X86_WP_WORKS_OK=y
> CONFIG_X86_INVLPG=y
> CONFIG_X86_BSWAP=y
> CONFIG_X86_POPAD_OK=y
> CONFIG_1GB=y
> # CONFIG_2GB is not set
> # CONFIG_MATH_EMULATION is not set
> # CONFIG_MTRR is not set
> # CONFIG_SMP is not set
>
> #
> # Loadable module support
> #
> CONFIG_MODULES=y
> # CONFIG_MODVERSIONS is not set
> # CONFIG_KMOD is not set
>
> #
> # General setup
> #
> CONFIG_NET=y
> # CONFIG_PCI is not set
> # CONFIG_MCA is not set
> # CONFIG_VISWS is not set
> CONFIG_SYSVIPC=y
> # CONFIG_BSD_PROCESS_ACCT is not set
> CONFIG_SYSCTL=y
> CONFIG_BINFMT_AOUT=y
> CONFIG_BINFMT_ELF=y
> CONFIG_BINFMT_MISC=y
> # CONFIG_BINFMT_JAVA is not set
> # CONFIG_PARPORT is not set
> # CONFIG_APM is not set
>
> #
> # Plug and Play support
> #
> # CONFIG_PNP is not set
>
> #
> # Block devices
> #
> CONFIG_BLK_DEV_FD=y
> CONFIG_BLK_DEV_IDE=y
> # CONFIG_BLK_DEV_HD_IDE is not set
> CONFIG_BLK_DEV_IDEDISK=y
> CONFIG_BLK_DEV_IDECD=m
> # CONFIG_BLK_DEV_IDETAPE is not set
> # CONFIG_BLK_DEV_IDEFLOPPY is not set
> # CONFIG_BLK_DEV_IDESCSI is not set
> CONFIG_BLK_DEV_CMD640=y
> # CONFIG_BLK_DEV_CMD640_ENHANCED is not set
> # CONFIG_IDE_CHIPSETS is not set
> CONFIG_BLK_DEV_LOOP=m
> CONFIG_BLK_DEV_NBD=m
> # CONFIG_BLK_DEV_MD is not set
> # CONFIG_BLK_DEV_RAM is not set
> # CONFIG_BLK_DEV_XD is not set
> CONFIG_PARIDE_PARPORT=y
> # CONFIG_PARIDE is not set
> # CONFIG_BLK_CPQ_DA is not set
> # CONFIG_BLK_DEV_HD is not set
>
> #
> # Networking options
> #
> CONFIG_PACKET=y
> CONFIG_NETLINK=y
> CONFIG_RTNETLINK=y
> CONFIG_NETLINK_DEV=m
> CONFIG_FIREWALL=y
> # CONFIG_FILTER is not set
> CONFIG_UNIX=y
> CONFIG_INET=y
> # CONFIG_IP_MULTICAST is not set
> CONFIG_IP_ADVANCED_ROUTER=y
> CONFIG_RTNETLINK=y
> CONFIG_NETLINK=y
> # CONFIG_IP_MULTIPLE_TABLES is not set
> # CONFIG_IP_ROUTE_MULTIPATH is not set
> # CONFIG_IP_ROUTE_TOS is not set
> CONFIG_IP_ROUTE_VERBOSE=y
> # CONFIG_IP_ROUTE_LARGE_TABLES is not set
> # CONFIG_IP_PNP is not set
> CONFIG_IP_FIREWALL=y
> # CONFIG_IP_FIREWALL_NETLINK is not set
> CONFIG_IP_TRANSPARENT_PROXY=y
> CONFIG_IP_MASQUERADE=y
> CONFIG_IP_MASQUERADE_ICMP=y
> CONFIG_IP_MASQUERADE_MOD=y
> CONFIG_IP_MASQUERADE_IPAUTOFW=m
> CONFIG_IP_MASQUERADE_IPPORTFW=m
> CONFIG_IP_MASQUERADE_MFW=m
> CONFIG_IP_ROUTER=y
> # CONFIG_NET_IPIP is not set
> # CONFIG_NET_IPGRE is not set
> CONFIG_IP_ALIAS=y
> # CONFIG_ARPD is not set
> # CONFIG_SYN_COOKIES is not set
> # CONFIG_INET_RARP is not set
> # CONFIG_SKB_LARGE is not set
> CONFIG_IPV6=m
> # CONFIG_IPV6_EUI64 is not set
> # CONFIG_IPX is not set
> # CONFIG_ATALK is not set
> # CONFIG_X25 is not set
> # CONFIG_LAPB is not set
> # CONFIG_BRIDGE is not set
> # CONFIG_LLC is not set
> # CONFIG_ECONET is not set
> # CONFIG_WAN_ROUTER is not set
> # CONFIG_NET_FASTROUTE is not set
> # CONFIG_NET_HW_FLOWCONTROL is not set
> # CONFIG_CPU_IS_SLOW is not set
>
> #
> # QoS and/or fair queueing
> #
> # CONFIG_NET_SCHED is not set
>
>
> #
> # Network device support
> #
> CONFIG_NETDEVICES=y
>
>
> #
> # Ethernet (10 or 100Mbit)
> #
> CONFIG_NET_ETHERNET=y
> # CONFIG_NET_VENDOR_3COM is not set
> # CONFIG_LANCE is not set
> # CONFIG_NET_VENDOR_SMC is not set
> # CONFIG_NET_VENDOR_RACAL is not set
> # CONFIG_RTL8139 is not set
> # CONFIG_SIS900 is not set
> # CONFIG_YELLOWFIN is not set
> CONFIG_NET_ISA=y
> # CONFIG_AT1700 is not set
> # CONFIG_E2100 is not set
> # CONFIG_DEPCA is not set
> # CONFIG_EWRK3 is not set
> # CONFIG_EEXPRESS is not set
> # CONFIG_EEXPRESS_PRO is not set
> # CONFIG_FMV18X is not set
> # CONFIG_HPLAN_PLUS is not set
> # CONFIG_HPLAN is not set
> # CONFIG_HP100 is not set
> # CONFIG_ETH16I is not set
> CONFIG_NE2000=m
> # CONFIG_SEEQ8005 is not set
> # CONFIG_SK_G16 is not set
> # CONFIG_NET_EISA is not set
> # CONFIG_NET_POCKET is not set
> # CONFIG_FDDI is not set
> # CONFIG_HIPPI is not set
> CONFIG_PPP=m
> CONFIG_SLIP=m
> # CONFIG_SLIP_COMPRESSED is not set
> # CONFIG_SLIP_SMART is not set
> # CONFIG_SLIP_MODE_SLIP6 is not set
> # CONFIG_NET_RADIO is not set
>
>
>
>
> -- This is the linux-help@xxxxxxxxx list. To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
--
"Who the h*** wants to hear actors talk?" -- H.M. Warner, Warner Brothers,
1927
--
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Jonathan Hall * jonhall@xxxxxxxxxxxx * PGP public key available
Systems Admin, Future Internet Services; Goessel, KS * (316) 367-2487
http://www.futureks.net * PGP Key ID: FE 00 FD 51
-= Running Debian GNU/Linux =-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-- This is the linux-help@xxxxxxxxx list. To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi
|
|
