Hi Brian
Im not sure what kernel the v4 of slackware is using but the newer kernels
2.2.x among them and some 2.1.x no longer support the use of ipfwadm to
configure firewall and masq etc. The new tool that is needed is the
ipchains that you have mentioned.
I had this same problem. I have been using ipmasq for around 18months and
have found it great. When I upgraded from 2.0.36 to 2.2.0 a while ago I
suddenly found that IPmasq was not working. After some time, I eventually
read the kernel help for the option and it said that ipchains was now
needed.
I looked for the latest ipmasq mini howto and this explained exactly what
you need to do forthe newer kernels and it has worked fine since. There are
many places to find the minihowtos but one place to start is www.ssc.com,
they will be able to point you in the right direction.
The only one thing I have found is that the IPMASQ modules for FTP etc dont
load. I have tried recompiling the kernel and modules several times but I
always get unresolved symbols. This has happened from 2.2.0 until 2.2.5
that I am now using.
I can get things from ftp using my browser, but can do not more. If anyone
has any clue on this one I would be grateful if you could email me as well
as posting to the group
Cheers
Tim Gildersleeve
Oak Tree Computer Services
http://otcs.hypermart.net
>Has anyone gotten IP-Masquerading working by editing the
>/etc/rc.d/rc.modules
>file to enable support for masquerading?
>I uncommented the lines for IP masquerading in my gateway machine, but
>I have not had any luck. I have a private IP network which uses the
>192.168.1.0 class C network. My gateway machine has an IP of
>192.168.1.100. I also have a routable static IP on my gateway machine
>207.212.133.10. I have two nic cards. I tested by pinging the the nic
>cards and it appears they have been properly assigned. Here are the
>lines in the file:
> ipfwadm -F -p deny
> ipfwadm -F -a m -b -S 192.168.1.0/24 -D 0.0.0.0/0
>Slackware 4.0 has a wrapper so ipfwadm works, but I have had no luck.
>If you know what the ipchain command is, I would be interested in that
>too.
>brian
>--------------------
>Brian Lavender
>Sacramento, CA
>http://www.brie.com/brian/
>"If a train station is where the train stops,
>what is a workstation?" -- Phil Adamson
by