ipchains help??

[Louie1961]

I am running three boxes on my home ethernet network. The network is basically a D-link 5 port switch, and three 100mbps nic cards. one machine is my wife's win 98 box, the other is my linux workstation and the third is a server of sorts (or will be someday) that I want to run Samba off of as well as to connect to the internet and act as a firewall, NAT/masquerade box. Right now the last box is connecting via a PPP connection, until I decide on a broadband provider.

I am running red hat 7.0.9?? (the wolverine beta) on both of my linux systems. With all firewalling disabled, all of the boxes on the network can ping each other..no connectivity issues there. Also, with the PPP connection up and running, my "server" box can see the internet, and netscape is getting DNS service from my ISP and works propperly.

My problem is the minute I try to configure ipchains, I lose everything. None of the boxes on the network can ping the server box, and I am also obviously not getting any masquerading. I have IP forwarding enabled on the server box, and have tried several suggested configurations from the various "how to's" without success. I have even tried to take all of the commands out of my config file, and use the basic:

echo 1 > /proc/sys/net/ipv4/ip_forward
ipchains -A forward -j MASQ -s 192.168.1.0/24 -d 0.0.0.0/0

Still no luck.

Any suggestions, or better yet, sources of some good basic ipchains scripts (so I know it's not something I screwed up in configuring ipchains) would be greatly appreciated. I have combed through the IPCHAINS-HOWTO, the IP-Masquerade-HOWTO, the Net-HOWTO, and the Linux Network Administrators Guide, and there is still something I am missing.

Thanks in advance.

 

[StuckMojo]

what kernel is in that version of RH? (uname -a will tell you)

 

[Ulfwald]

contact a member known as shuxclams, he is a linux guru.

 

[Inkubus]

Although the howto is good it can be a little much to swallow and actually write your own rulesets.

It's best if you use some software to automatically create the rulesets based on the information you provide.

Take a look at a few of these :-

www.pointman.org/PMFirewall
http://www.vap0r.com/html/firewall.html
http://www.crocodile.org/~vadim/fwbuilder/
http://fwup.org/
http://kfirewall.kila.intratech.no/

I recommend using PMFirewall.

 

[Shuxclams]

Search on IPMASQ.


BTW; I am not a "guru"... but thanks, I'll leave that designation to Damaged and others.






SHUX