Re: [Sheflug] Re: Routing Problem

["Alex Hudson" <nospam [at] alexhudson.com>]

> Tried that one as well and I'm getting this from netstat -nr when I'm
> connected.....
>
> Destination     Gateway     Genmask     Flags   MSS   Window   irtt
> Iface
> 194.247.47.47  0.0.0.0  255.255.255.255  UH      0      0       0
> ippp0
> 192.168.1.0    0.0.0.0  255.255.255.0    U       0      0       0
> eth0
> 127.0.0.0      0.0.0.0  255.0.0.0        U       0      0       0   lo
> 0.0.0.0       194.247.47.251  0.0.0.0    UG      0      0       0
> ippp0
>
> So, it looks like  'route add default gw device ippp0' works in the
> way it should

yep

>but I'm not sure why I can't forward packets ?

You *can* forward, but your isp will remove them. You need to masquerade -
try an ipchains command to accept all forwarded packets with the MASQ option
set. Dunno how it works in YaST tho'.

>  Other
> thing is it looks like I've now got two ippp0 interfaces.

No, you don't. You have two routes which use the ippp0 interface. It's
correct, and there's nothing particularly insecure about it.

>  Very
> untrustworthy :))  How about 'route add default gw pirhana' as the
> O'Reilly Network Administrator's Guide suggests ?

pirhana being which machine? Note that swapping an ip address for a machine
name does nothing to enhance security; for the paranoid, it reduces it ;)

> Looked under forwarding in YaST and it's definitely enabled.  So, not
> sure what's wrong

Masquerading ;)

Cheers,

Alex.

---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.