← Back to team overview

sslug-teknik team mailing list archive

Problemer med MASQ og Sslug firewall-PART2

 

  ######################
  # Setup Masquerading #
  ######################

  ### NB: This is disabled by default. If you want to use     ###
  ###     masquerading, just remove the "###" comment-markers ###
  ###     from the lines below.                               ###

  # Masquerade anything that needs forwarding on the 
  # external interface (ppp0, usually), except all the Windows
  # Netbios chit-chat on ports 137 thru 139.
  # Note: "-i" on the forward chain refers to the OUTGOING interface.
     ipchains -A forward -i ppp+ -p tcp -s 0/0 137:139 -j DENY
     ipchains -A forward -i ppp+ -p udp -s 0/0 137:139 -j DENY
     ipchains -A forward -i ppp+ -j MASQ




  # Load the masquerading prototcol-modules
  # This loads all of the modules in /lib/modules/2.2.x/ipv4/
     for f in /lib/modules/`uname -r`/ipv4/*masq*.o; do
      /sbin/modprobe `basename -$f`
   done

**OK HER GÅR JEG ISTÅ-
Når jeg "runner" scriptet  får jeg fejl; 
modeprobe: can't locate module ip_masq_***
hele loopet ud!

uname -r  giver samme kernel version som modulerner er gemt under, men det
virker som om stien til modulerne ikke kan findes?

Jeg bruger Red hat 6.2 , men  det skulle vel være ok?

Håber nogle kan hjælpe

Chris










  # Enable a hack in the kernel for dial-on-demand Internet connectivity
  # without having a static IP address.
  # Without setting this, the first packet that goes out on a dial-on-demand
  # connection has the wrong sender IP address, meaning that you will have
  # to retransmit at least once.
  # (This has nothing to do with security - but it is useful for a home
  # network using masquerading).
   echo "1" >/proc/sys/net/ipv4/ip_dynaddr

  # Enable forwarding (needed for masquerading)
    ### echo "1" >/proc/sys/net/ipv4/ip_forward
#Note Enable i toppen af script-



Follow ups