TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [TCLUG:2655] Routing question...





> -----Original Message-----
> From: Chad C. Walstrom [mailto:chewie@soncom.com]
> Sent: Tuesday, December 08, 1998 12:07 PM
> To: tclug-list@listserv.real-time.com
> Subject: [TCLUG:2655] Routing question...
>
<snip>

I missed the first few posts on this, but I'll give it a shot.  Apologies if
I ask any repeat questions.

> LAN
>   * 192.168.1.1
>     - Linux 2.0.36
>     - Wookimus.icewall.org
>     - BIND 8 running successfully
>         Forward-only to ISP DNS servers
>     - DHCP running successfully
>         Addresses 192.168.1.32 - 64

>   * Windows 98 Client
>     - Mynoc.icewall.org
>     - Successfully addresses NIC
>     - Does not list "Default gateway" in network card config
>     - Gateways set to 192.168.1.1 in TCP/IP config for network card

Have you run winipcfg on the Win98 box after boot to make sure the
DHCP-provided settings are what you expect them to be?  Default gateway and
DNS entries in particular?  Also, have you tried connecting using just the
IP address, not the name?

> Routes
>   * Nets
>     - route add -net 255.255.255.255 netmask 255.255.255.255 eth0
>         (Needed for Windows client)
>     - route add -net 192.168.1.0 netmask 255.255.255.0 eth0
>         (icewall.org)

These look fine.

>   * Hosts
>     - route add -host 127.0.0.1 netmask 255.255.255.0 lo

I haven't ever needed to manually add a route for the loopback device.

>   * pppd Adds...
>     - route to internet access host
>     - default gateway to internet access host
>
> It seems like everything should be in order, but for some reason, I
> still can't access the internet through my Win98 machine.
>
> In addition, could someone tell me why you are supposed to route to
> the local loopback device as a host rather than a net?  In what case
> would you need to do the following:
>     - route add -net 127.0.0.0 netmask 255.255.255.0

Again, you shouldn't need to manually route the loopback device anywhere.

Are you sure that the ipfwadm commands to set up the masquerading are
properly set up?  Going from the HOW-TO, I'd guess them to be as follows:

/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
/sbin/modprobe ip_masq_raudio
/sbin/modprobe ip_masq_irc
/sbin/ipfwadm -F -p deny
/sbin/ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0

That should be all you need. I put mine in /etc/rc.d/rc3.d/S99cap which I
created because S99local was over-written when I upgraded from RH5.0 to 5.2.
:-(

--
Carl Patten
Systems Administrator
Trimodal Inc.