[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ADSL Masuerading with 2.4.7-10 and ipchains Q



On Mon, 29 Oct 2001, Stiven Andre wrote:

> Hi list.
>
> After reading the adsl-how-to(by mulix) I got my adsl connection up the

by dani arbel and i. gotta give credit where credit is due.

> second section covers the ip masquerading setup and strongly recommends
> to use the IP tables. But after reading the masquerade how-to I found that
> much modules are not supported by iptables yet.
> I decided to go for old ipchains but my distro is RH7.2 with the
> default kernel 2.4.7-10 that supports IPtables and ip chains as well.

unless i'm mistaken, it only supports ipchains compatibility mode, so
you end up using iptables anyway.

> But when I try to add modules like "ip_masq_ftp" "ip_masq_irc" I get
> an error message that says that there is no module with this name.

did you compile them? i dont know about irc, but the masq_ftp module is
part of the kernel 2.4. kernel. i dont know about 2.4.7-10, though.

anyway, to see if it's there, go to /lib/modules/`uname -r`/ and look
there. i think the modules will be under kernel/net/ipv4/netfitler/.

> I also tryed the iptables but after 3-4 days of playing I came out with
> nothing, I was unable to get up anything. The Simple script that I found
> in ADSL-HOW-TO(By Mulix) is only for setting up the "B" choise from the
> How-to (Only one NIC on Linux box) but I am using option A(2 NICs).

please explain what exactly you want to do, and where you fail, so we
can help you better.

> Can you please help me to choose what should I use ipchains or iptables,
> Or help me to get the ipchains modules for my kernel.

i think you should use iptables, as they are technically superior.

btw, interesting tidbit: i compiled on the weekend the ftp connection
tracking and masq modules on 2.4.10 kernel, and got instant NULL pointer
dereference and  kernel crash. not very nice.

i haven't had time to debug further (or try with a 2.4.13[-ac] kernel,
my next step), but i'm curious if anyone got it to work?
-- 
mulix

http://www.pointer.co.il/~mulix/
http://syscalltrack.sf.net/



=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il