setting up ip_masquerading

[crc_1]

I have just finished setting up Mandrake 7.2 and it works well in and of itself, however it doesn't show up on the network when I browes it from a windows computer. I intend to set it up to allow the other three computers on the network, a Windows 2000 pro station, a WindowsME station and a Windows station that could be using anything from Win95 to ME (it is a transient station, usualy a customers)

The Internet connection is broadband with a static ip. and is up 24/7 through dsl type box.

The question is, do I need two ethernet cards to make the ipmasq work?

Also I have to admit that I am as new to linux as you can get and I have not idea what exactly has to be done to get this to work.

Is there an applet in mandrake that is user friendly that can be used to set this up?

I have been consulting on the DOS and Windows end of this thing for 14 years but feel like a fish out of water trying to get this to work.

I have the host name, the static ip address and the gateway address but dont know where to put them nor how to configure my windows machines to access this.

Mandrake is installed on the second drive on a 233 pentium with 49 megs of ram, WindowsME is on the other drive and I can dual boot them. I used the linux file system on the other drive and installed the complete 515 pakage install for the server. It boots into KDE desktop.

To tell you how new I am with this, I do not even know where these files would be located or how to modify them but I am willing to learn.

When I get this machine up and running it will probably never get shut down. Then I will install my copy of Turbolinux server 6.0 on one of my other machines and continue learning.

also how can I get linuxconf to start from the command line.

If I have not given you enough info feel free e-mail me.

Thanks for any help.

[Mountainman]

Hey man. I would love to help ya, but I am at work right now. Goto my page and get a copy of the Network Admin guide (I think I have a copy of it there on the links page). On your system, goto /etc/services/networking (I think, again, I am at work) and enable Ip_forwarding. Should change it to "true". There are several more options that you need to enable for forwarding but that is the most important one. If you want to be able to browse you linux drive from you other windows computers, you need to setup SAMBA which is another huge ball o wax. If you have two network cards, you need to setup the card going to you dsl modem (we will call it eth0) and the network card going to the rest of you systems (eth1). First type in ifconfig and check you results to see that both cards are shown and up. Then try to ping from one card to the other. Post what happens here and we can work from there.

------------------
---Meddle not in the affairs of Dragons, for thou art but a snack, and tasty with ketchup---
Http://www.geocities.com/mountainmancentral

[Coral Sea]

Download the free Samba book from O'Reilly. Also, if you're feeling adventurous, you can also use NFS but you'll need to install an NFS client on the Windows box (free evaluation but then you have to fork out $100+ after 15 days if you want to keep it). But it's kinda neat to see how the NFS solution works vs. the free Samba one.

------------------
Visit my Web Site at http://members.home.net/2826651556/

[crc_1]

To coral sea....
the url for the free samba guide would help
thanks

To mountain man...
Is there a chance we could get a one on one chat senario going on Yahoo messenger or similar, have lots of questions.

I put second nic in server but it is not recognized, it is the exact same one as eth0
and when I fire up the windows partition, windows recognizes it fine. I am using KDE x setup and am having trouble getting it to allow me to boot up as root and logging out sucks. Tried the help file but it is mostly a venue for asking for donations. Would like to be able when I want, to boot to text only command line. I found configuration file for the nic number 1 but could not add eth1, was logged in as user and I don't know if adding it to the file would make it work anyway. I can chat on windows machine and modify the linux box at the same time as my win 2000 machine is different box, let me know, time zone is AZ.

[A_Lawn_GNOME]

Okay so you have two identical NIC's? AFAIK, as long as the module is in there, they should work. To make things short, use netconf to configure (CLI tools can come later, this will get it done fast).

Set up each NIC, the DNS, and routing. If you have probs, post them.

Get pmfirewall from freshmeat.net and run the install.sh. This will generate a firewall script for you and at the end, say yes to the ip masq/Internet connection sharing question.

Now tell it to run on start up and put
"echo "1" > /proc/sys/net/ipv4/ip_forward" in /etc/rc.local. You might also want to consider ip_defrag and other options.

Some notes, Starcraft and other UDP games need Loose UDP. So put "echo "1" > /proc/sys/net/ipv4/ip_masq_udp_dloose" in /etc/rc.local.

[crc_1]

Well I think I have both cards working, here is what I was able to determine:
eth0 Link Encap:Ethernet HWaddress:00:2E:af:f6:9e:b1
Init Address:192.168.0.1 Bcast:192:168:0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 METRIC:1
Rx Packets:0 Errors:0 Dropped:0 Overrun:0 Frame:0
Tx Packets:0 Errors:0 Dropped:0 Overrun:0 Frame:0
Collisions:0 Txqueuelen:100
Interupt:11 Base Address:0x6500

eth1 Link Encap:Ethernet HWaddress:00:60:97:61 http://www.linuxnewbie.org/ubb/biggrin.gifE:F0
Init Address:192.168.0.2 Bcast:192:168:0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 METRIC:1
Rx Packets:0 Errors:0 Dropped:0 Overrun:0 Frame:0
Tx Packets:0 Errors:0 Dropped:0 Overrun:0 Frame:0
Collisions:0 Txqueuelen:0
Interupt:9 Base Address:0x6600

lo Link Encap:Local Loopback
Init Address:127.0.0.1 Mask:255.255.255.0
UP Loopback RUNNING MTU:3924 METRIC:1
Rx Packets:18 Errors:0 Dropped:0 Overrun:0 Frame:0
Tx Packets:18 Errors:0 Dropped:0 Overrun:0 Frame:0
Collisions:0 Txqueuelen:0

Does this seem right. also I have build 2.2.17 and I think there are a lot of what is needed to get masking to work already present and I did all 515 packages during install. Is there a firewall already or do I have to install one, If I do what is the correct one for my build version?

ipforwarding is set to yes or true and ipchains is the same. what now?

I downloaded the latest ipmasq howto but it is very confusing for a newbie, can anyone detail out what is the procedure for my installation of Mandrake 7.2?

[Mountainman]

Not real sure for drake 7.x. This is the easy way. Download pmfirewall. Install it and have it setup a firewall and ipmasqing for you. When in doubt, cheat. http://www.linuxnewbie.org/ubb/biggrin.gif

------------------
---Meddle not in the affairs of Dragons, for thou art but a snack, and tasty with ketchup---
Http://www.geocities.com/mountainmancentral

[Coral Sea]

Here is the URL for the free Samba book in PDF format (note that you can also download an HTML format book, too):
http://www.oreilly.com/catalog/samba/chapter/book/indexpdf.html

Another simple firewall/ip masquerader is Easychains, which is downloadable from:
http://mose.stc.cx/easychains/

You can get IP Maquerading working with three command lines but that's not a very good idea because you'd be naked as a jaybird on the Web. http://www.linuxnewbie.org/ubb/biggrin.gif

------------------
Visit my Web Site at http://members.home.net/2826651556/

[Coral Sea]

Not sure which one of you NICs is on the Web side, but one of those IP addresses is wrong. Even with static IP, the Web side IP address cannot start with 192.168.0. Check to make sure you know what the static IP address is that you've been assigned. Maybe it looks more like 24.XX.XX.XX? Or, keep it simple and use DHCP on the Web side NIC -- it should be able to resolve the IP address for you whether it's static or not.

------------------
Visit my Web Site at http://members.home.net/2826651556/

[crc_1]

Thanks Coral sea, I know which one is on the web side but do not want to put correct ip there till I am ready to go, I assume I need to attach domain name, ip address and gateway my isp there and internal address scheme in the other. I will assign something like 99.76.0.1 or .0 I am not sure for the server and .02, .03, .04 etc. for the workstations. It is imparative that the web side always see only one machine connected.

If I am going in wrong direction please let me know.

Thanks.

[Coral Sea]

To keep from getting really disoriented, I'd suggest getting the Web side NIC set up properly to begin with. Use linuxconf for this because editing all the right files by hand isn't worth the hassle. Mandy 7.2 has some easy utilities packaged with DraxConf that could also be used to set up your NICs and get Internet Connection Sharing set up (but that would be too easy!).

First, you need to know what drivers your NICs need. Assuming you know that, then launch linuxconf from the menu(Configuration -> Other -> Linuxconf). Select the network set up tab and enter the first NIC info. Put in the correct static IP address that your ISP has assigned you, select the correct NIC driver, and make sure you select the manual resolution option. Repeat the process for the second NIC except assign 192.168.0.1 as the IP address.

At this point, you should be able to browse the Web from your Linux box and ping any other PCs on the LAN (e.g., you should be able to ping the Windows machine that you've set up with IP address 192.168.0.2).

To set up Internet Connection sharing, refer to the numerous messages in this newsgroup related to IP masqerading or use Mandy 7.2's Internet Connection Sharing set up utility. I'd suggest getting a simple firewall/IP masquerader like Easychains (go to www.tucows.com (http://www.tucows.com) for the download). To share files and printers acrossed a mixed platform LAN, use Samba. Again, lots of messages in this newsgroup that should help. Also, download the free Samba book from O'Reilly at http://www.oreilly.com/catalog/samba/chapter/book/indexpdf.html.

Have fun! http://www.linuxnewbie.org/ubb/wink.gif

------------------
Visit my Web Site at http://members.home.net/2826651556/

[Coral Sea]

Forgot to mention that you'll also need to enter the IP addresses of your ISP's domain name servers to make Web browsing possible with domain names. You enter these on the Web side NIC using Linuxconf.

------------------
Visit my Web Site at http://members.home.net/2826651556/