Re: [seul-edu] Re: HELP!

[jeff@smluc.org]

Hi Dave,

On Thu, 14 Sep 2000, Dave Prentice wrote:

-->Date: Thu, 14 Sep 2000 20:21:30 -0500
-->From: Dave Prentice <dprentice@uno.edu>
-->Reply-To: seul-edu@seul.org
-->To: seul-edu@seul.org
-->Subject: Re: [seul-edu] Re: HELP!
-->
-->Bob,
-->    I downloaded a firewall script from redhat. However, it tries to do a
-->modprobe for three modules: ip_masq_ftp.o, ip_masq_irc.o, and
-->ip_masq_raudio.o. None of them are on my system, and I don't know where to
-->download them. An internet search gave only an outdated URL. Do you know
-->where I can download these drivers, or what package they might be part of?

These are ALL KERNEL modules.  You need to either build your own kernel
with these enabled, or grab a redhat stock kernel that has them.  Since I
do Debian and not Redhat, I'm not sure if their is a stock redhat kernel
with the ip_masq_ftp and ip_masq_irc modules.  However I have access to a
few Redhat gurus if you can't find out.

They normally live in /lib/modules/[kernel number]/ipv4/
where [kernel number] equals something like 2.2.17 or 2.0.36 or something.

Sincerely,

Jeff Waddell
jeff@smluc.org

-->Thanks, -->Dave Prentice
-->prentice@instruction.com -->http://www.originsresource.org
-->http://www.prenticenet.com/home/dprentice
-->-----Original Message-----
-->From: Robert Hopcroft <hopcroft@uswest.net>
-->To: seul-edu@seul.org <seul-edu@seul.org>
-->Date: Wednesday, September 13, 2000 10:06 PM
-->Subject: Re: [seul-edu] Re: HELP!
-->
-->
-->Dave Prentice wrote:
-->
-->>     Regarding masquerading: I used Linuxconf to tell every one of the
-->other
-->> machines that 192.168.0.106 (pc6a) is the default gateway. They don't seem
-->> to care. Is there someplace where I am supposed to tell them what its
-->"real"
-->> internet IP on the other NIC is? It's a static address, though it connects
-->> as DHCP. Ifconfig says everything is fine, and pc6a accesses the net just
-->> fine, but the others don't seem to know it's there.
-->
-->Dave, again you are very close to what I have. Your pc6a is equivalent to my
-->firewall machine. I'm also running dhcp. However I'm running OpenBSD on the
-->firewall. The internal machines only need to know gateway IP, namely
-->192.168.0.106
-->I assume the internal machines' /etc/hosts files are OK since you can ping.
-->What
-->about the internal machines' /etc/resolv.conf files. I don't know the name
-->of
-->your
-->internal network. Let's assume it's z.net and your ISP's primary and
-->secondary
-->DNS
-->servers IP addresses are x.x.x.x and y.y.y.y respectively or are you running
-->your
-->own nameserver. Your internal machines /etc/resolv.conf files should be
-->
-->search z.net
-->nameserver x.x.x.x
-->nameserver y.y.y.y
-->
-->I didn't use Linuxconf as I set everything up when I did the installation.
-->
-->Are you getting through your firewall. I don't know Linux but in OpenBSD
-->speak
-->is ipforwarding turned on. What about ipnat and ipfilters (ipchains in
-->Linux).
-->Run
-->tcpdump on the firewall's internal and external interfaces. See what's
-->happening.
-->You'll have to look at the man pages since I'm running OpenBSD which is
-->probably slightly different.
-->
-->Finally are you sure you want to run anything on your firewall. I was under
-->attack
-->a little wile ago though they seem to have given up.
-->
-->Bob
-->
-->
-->
-->
-->