debugging IP_Masq and Portforwarding

debugging IP_Masq and Portforwarding

Post by Derek Ea » Fri, 05 Mar 1999 04:00:00



Hi,

I've been running IP Masquerading on my RH Linux 5.1 machine for a few
months now. Had everything working FTP and even was able to establish
VPN connections from NT machines through the Linux gateway out to
other NT machines. Last weekend I decided to try to bring my web site
to my internal network and would like to run in on NT and IIS4. This
means that I need to route http traffic through my Linux gateway to
the IIS box on my internal network.

Ever since I began this endeavor I've had tons of problems.
Masquerading seems to work ok, but I can no longer FTP from my
internal Windows machines to other machines on the Internet. My VPN no
longer connects to one of my clients sites. And I've never been able
to successfully get my http traffic routed to the IIS machine. I've
tried individually installing rinetd, ipportfw and ippfvs (Linux
Virtual Server), on my upgraded 2.0.36 kernel. None of these have done
the trick. I assume that this is just a bit of configuration ignorance
on my part. I need suggestions on how to track down where the problem
really lies.

What tools are there available that will allow me to trace where
packets are going on my network? I need to know if things are actually
making through the firewall coming, or if they are being stopped going
out.

Any help would be greatly appreciated.

Thanks, Derek

http://www.grandprixsw.com
Anti spam notification:
Please don't just hit reply to send me email. Remove the despaminator (nospam.)

 
 
 

debugging IP_Masq and Portforwarding

Post by David Kirkpatric » Fri, 05 Mar 1999 04:00:00


You can do some initial monitoring with tcpdump -i eth0 etc.


> Hi,

> I've been running IP Masquerading on my RH Linux 5.1 machine for a few
> months now. Had everything working FTP and even was able to establish
> VPN connections from NT machines through the Linux gateway out to
> other NT machines. Last weekend I decided to try to bring my web site
> to my internal network and would like to run in on NT and IIS4. This
> means that I need to route http traffic through my Linux gateway to
> the IIS box on my internal network.

> Ever since I began this endeavor I've had tons of problems.
> Masquerading seems to work ok, but I can no longer FTP from my
> internal Windows machines to other machines on the Internet. My VPN no
> longer connects to one of my clients sites. And I've never been able
> to successfully get my http traffic routed to the IIS machine. I've
> tried individually installing rinetd, ipportfw and ippfvs (Linux
> Virtual Server), on my upgraded 2.0.36 kernel. None of these have done
> the trick. I assume that this is just a bit of configuration ignorance
> on my part. I need suggestions on how to track down where the problem
> really lies.

> What tools are there available that will allow me to trace where
> packets are going on my network? I need to know if things are actually
> making through the firewall coming, or if they are being stopped going
> out.

> Any help would be greatly appreciated.

> Thanks, Derek

> http://www.grandprixsw.com
> Anti spam notification:
> Please don't just hit reply to send me email. Remove the despaminator (nospam.)


--