by Hi everyone,
A couple of days ago i wrote about not being able to find out whether
or not my firewalling problems would be solved with msaquerading or a
proxy server.
After getting some quite informative mails back i decided on using a
proxy server (socks).
Now I have run into a strange kind of problem.
My Linux box (slackware 1.2.13) is configured with two IP interfaces.
A token-ring interface connected to the protected network has the IP
addresse 192.100.1.254 (mask 255.255.25.0) while the other interface,
connected to the unsecure (internet) network, an etherlink III card
has the IP addresse 194.255.17.65. Before enabling the Firewalling
option and disabling the IP forwarding/gatewaying function in the
kernel it was possible for me to ping the both interfaces from the
secure and the unsecure network. Then I recompiled the kernel with
firewalling on and disabled forwarding and gatewaying.
Thereafter i installed SOCKS 4.2b to act as my connection from the
inside network to the unsecure network. It needed three files
sockd.route
194.255.17.65 0.0.0.0 0.0.0.0
Which should route all requests to the outgoing interfade (on the
unsecure net).
sockd.conf
deny 0.0.0.0 0.0.0.0 192.100.1.0 255.255.255.0
permit 192.100.1.0 255.255.255.0 0.0.0.0 0.0.0.0
Which should give me access from all machines on the local net to the
outside world.
Now the funny things comes. When i use netscape (from windows 95) to
get access to the outside network everything seems to work just fine.
But when i use ping from the internal network then i can ping both
interfaces on the firewall. The same is possible from the unsecure
network. This should not be possible when firewalling is on and
forwarding is off.
I then recompiled the kernel again, after reading the Firewalling
howto which stated that if this was possible then forwarding was not
disabled. this time making sure that forwarding was off. But to no
avail. It is still possible toe ping both interfaces from both the
"secure" and "insecure" side of the net ????
Do anyone have any ideas as to what might be wrong. What am i missing
here ???
Thanks in advance
Lasse K. christiansen