thanks for your help but I changed one of the NIC and it is working 8.)
The Nic I changed has been succesfully tested in another Win box and it
works !!
I don''t know what happens between the two 3Com cards.
thx for all
-----Original Message-----
From: jselph@icanon.com [mailto:jselph@icanon.com]
Sent: Tuesday, January 30, 2001 4:41 PM
To: mfleurmont@keymage.com
Subject: ipchains
Matthieu,
try this;
# echo "1" > /proc/sys/net/ipv4/ip_forward
// check the file contents to ensure that ip_forward set to true
# cat /proc/sys/net/ipv4/ip_forward
// allow loopback interface
# ipchains -A input -i lo -j ACCEPT
# ipchains -A output -i lo -j ACCEPT
// traffic within the local network eth1 assumed to be interior
ipchains -A input -i eth1 -s local_interior_addr_range_here -j ACCEPT
ipchains -A output -i eth1 -d local_interior_addr_range_here -j ACCEPT
// MASQ all outbound eth0 assumed to be exterior
ipchains -A forward -i eth0 -s local_interior_addr_range_here -j MASQ
I would also suggest that you read the HOWTO sections on networking,
firewalls, masquarade, and ipchains these can be found at RedHat''s
site...
James Selph
ICANON Associates, Inc.
-----Original Message-----
From: redhat-secure-server-admin@redhat.com
[mailto:redhat-secure-server-admin@redhat.com]On Behalf Of Matthieu
Fleurmont
Sent: Monday, January 29, 2001 12:46 PM
To: ''redhat-secure-server@redhat.com''
Subject: RE: unsubscribe
??
-----Original Message-----
From: Mark Brad [mailto:mbrad@ontheverge.com]
Sent: Monday, January 29, 2001 6:42 PM
To: redhat-secure-server@redhat.com
Subject: unsubscribe
Matthieu Fleurmont wrote:
Hello,
I have installed a RH 6.2 with one 3Com builtin my motherboard (DELL
Optiplex GX1) and it is working very well with the 3C59x driver module
originaly included in the distribution.
I would like to set up a gateway-firewall with this box so I added a 3C905B
NIC in this computer. Thus I am using the 3C90x for the two NIC as
preconized by 3Com.
And then nothing is routed through the two NICs. My public IP is well
responding on the 3C59x and my private IP is responding on the other NIC but
when I define this box as a gateway for another one nothing passes through.
I use manually each time I restart "echo 1
>/proc/sys/net/ipv4/ip_forward
it". But it didn''t help me.
I put a tcpdump on each interface and I can see that nothing passes through
one card to another in any direction...
Is there a bug with this 3Com driver module or am I proceeding the wrong way
to build a gateway ?
I tried the following commands because my intention was originaly to give
access from outside to a computer in my LAN :
ipchains -s 195.154.93.0 -d 172.16.1.36 -j MASQ -A forward (with and without
the -b option)
ipchains -s 195.154.93.0 -d 172.16.1.36 -j ACCEPT -A forward (with and
without the -b option)
and many various rules that I think should have routed packets from outside
to inside but I lost two days on it....
I am quiet new in Linux and I may have tried the wrong tools or failed my
box setup...
Any help would be pleased 8.)
Regards
Matthieu Fleurmont
Keymage
Matthieu Fleurmont wrote:> thanks for your help but I changed one of the NIC and it is working > 8.)The Nic I changed has been succesfully tested in another Win box > and it works !!I don''t know what happens between the two 3Com > cards.thx for all > > -----Original Message----- > From: jselph@icanon.com [mailto:jselph@icanon.com] > Sent: Tuesday, January 30, 2001 4:41 PM > To: mfleurmont@keymage.com > Subject: ipchains > > Matthieu, try this;# echo "1" > > /proc/sys/net/ipv4/ip_forward// check the file contents to > ensure that ip_forward set to true# cat > /proc/sys/net/ipv4/ip_forward// allow loopback interface# > ipchains -A input -i lo -j ACCEPT# ipchains -A output -i lo > -j ACCEPT// traffic within the local network eth1 assumed to > be interioripchains -A input -i eth1 -s > local_interior_addr_range_here -j ACCEPTipchains -A output > -i eth1 -d local_interior_addr_range_here -j ACCEPT// MASQ > all outbound eth0 assumed to be exterior ipchains -A forward > -i eth0 -s local_interior_addr_range_here -j MASQI would > also suggest that you read the HOWTO sections on networking, > firewalls, masquarade, and ipchains these can be found at > RedHat''s site... James Selph > ICANON Associates, Inc. > > -----Original Message----- > From: redhat-secure-server-admin@redhat.com > [mailto:redhat-secure-server-admin@redhat.com]On > Behalf Of Matthieu Fleurmont > Sent: Monday, January 29, 2001 12:46 PM > To: ''redhat-secure-server@redhat.com'' > Subject: RE: unsubscribe > > ?? > > -----Original Message----- > From: Mark Brad > [mailto:mbrad@ontheverge.com] > Sent: Monday, January 29, 2001 6:42 PM > To: redhat-secure-server@redhat.com > Subject: unsubscribe > > Matthieu Fleurmont wrote: > > > > > > > Hello, > > I have installed a RH 6.2 with one > > 3Com builtin my motherboard (DELL > > Optiplex GX1) and it is working very > > well with the 3C59x driver module > > originaly included in the > > distribution. > > > > I would like to set up a > > gateway-firewall with this box so I > > added a 3C905B NIC in this computer. > > Thus I am using the 3C90x for the two > > NIC as preconized by 3Com. > > > > And then nothing is routed through the > > two NICs. My public IP is well > > responding on the 3C59x and my private > > IP is responding on the other NIC but > > when I define this box as a gateway > > for another one nothing passes > > through. > > > > I use manually each time I restart > > "echo 1 >/proc/sys/net/ipv4/ip_forward > > it". But it didn''t help me. > > I put a tcpdump on each interface and > > I can see that nothing passes through > > one card to another in any > > direction... > > Is there a bug with this 3Com driver > > module or am I proceeding the wrong > > way to build a gateway ? > > I tried the following commands because > > my intention was originaly to give > > access from outside to a computer in > > my LAN : > > > > ipchains -s 195.154.93.0 -d > > 172.16.1.36 -j MASQ -A forward (with > > and without the -b option) > > ipchains -s 195.154.93.0 -d > > 172.16.1.36 -j ACCEPT -A forward (with > > and without the -b option) > > and many various rules that I think > > should have routed packets from > > outside to inside but I lost two days > > on it.... > > I am quiet new in Linux and I may have > > tried the wrong tools or failed my box > > setup... > > Any help would be pleased 8.) > > Regards > > Matthieu Fleurmont > > Keymage > > >