sslug-teknik team mailing list archive
-
sslug-teknik team
-
Mailing list archive
-
Message #23596
Problemer med MASQ og Sslug firewall-PART2
######################
# Setup Masquerading #
######################
### NB: This is disabled by default. If you want to use ###
### masquerading, just remove the "###" comment-markers ###
### from the lines below. ###
# Masquerade anything that needs forwarding on the
# external interface (ppp0, usually), except all the Windows
# Netbios chit-chat on ports 137 thru 139.
# Note: "-i" on the forward chain refers to the OUTGOING interface.
ipchains -A forward -i ppp+ -p tcp -s 0/0 137:139 -j DENY
ipchains -A forward -i ppp+ -p udp -s 0/0 137:139 -j DENY
ipchains -A forward -i ppp+ -j MASQ
# Load the masquerading prototcol-modules
# This loads all of the modules in /lib/modules/2.2.x/ipv4/
for f in /lib/modules/`uname -r`/ipv4/*masq*.o; do
/sbin/modprobe `basename -$f`
done
**OK HER GÅR JEG ISTÅ-
Når jeg "runner" scriptet får jeg fejl;
modeprobe: can't locate module ip_masq_***
hele loopet ud!
uname -r giver samme kernel version som modulerner er gemt under, men det
virker som om stien til modulerne ikke kan findes?
Jeg bruger Red hat 6.2 , men det skulle vel være ok?
Håber nogle kan hjælpe
Chris
# Enable a hack in the kernel for dial-on-demand Internet connectivity
# without having a static IP address.
# Without setting this, the first packet that goes out on a dial-on-demand
# connection has the wrong sender IP address, meaning that you will have
# to retransmit at least once.
# (This has nothing to do with security - but it is useful for a home
# network using masquerading).
echo "1" >/proc/sys/net/ipv4/ip_dynaddr
# Enable forwarding (needed for masquerading)
### echo "1" >/proc/sys/net/ipv4/ip_forward
#Note Enable i toppen af script-
Follow ups