IPChains Problem

Top Page
Attachments:
Message as email
+ (text/plain)
Delete this message
Reply to this message
Author: Kevin Brown
Date:  
Subject: IPChains Problem
> Here is what I have, a SPARC 5 running Debian Woody, 2.2 kernel since the
> 2.4 is not stable, and a single NIC. I have Alias the NIC for two addresses.
> This box is an internal router for a small network. The interfaces file
> looks like:
>
> # /etc/network/interfaces -- configuration file for ifup(8), ifdown(8)
>
> # The loopback interface
> auto lo
> iface lo inet loopback
>
> # The first network card - this entry was created during the Debian
> installation
> # (network, broadcast and gateway are optional)
> auto eth0
> iface eth0 inet static
>      address 192.168.1.1
>      netmask 255.255.255.0
>      network 192.168.1.0
>      broadcast 192.168.1.255

>
> auto eth0:1
> iface eth0:1 inet static
>     address 10.0.0.1
>     netmask 255.255.225.0
>     network 10.0.0.0
>     broadcast 10.0.0.255

>
> I am trying to setup some IPChains to do the routing. I have tried the
> following:
>
> ipchains -A forward -s 192.168.1.0/24 -j MASQ
> ipchains -A input -s 192.168.1.0/24 -d 0.0.0.0/0 -j ACCEPT
> ipchains -A forward -s 192.168.1.0/24 -d 10.0.0.1 -j ACCEPT
> ipchains -A output -s 192.168.0.0/24 -d 0.0.0.0/0 -j ACCEPT
> ipchains -A output -s 10.0.0.1 -d 10.0.0.254 -j ACCEPT
> ipchains -A input -s 10.0.0.1 -d 0.0.0.0/0 -j ACCEPT
> ipchains -A forward -s 10.0.0.1 -d 10.0.0.254 -j ACCEPT
>
> All I can do is ping the interface card. I can use either address,
> 192.168.1.1 or 10.0.0.1, but I can not ping the DSL router on the other side
> of the box, 10.0.0.254. What am I missing to get IPChains to route on this
> single NIC?
>
> I have IPChains version: 1.3.10, 1-Sep-2000 and Kernel version: Linux Router
> 2.2.20 #1 Fri Nov 16 15:48:02 EST 2001 sparc unknown.
>
> Any ideas what I am doing wrong?


I'm just curious, but why are you setting up a NAT/Masq box when the two
networks you are trying to work with are both non-Net routable?