Masquerading problems

[Craig White]

> -----Original Message-----
> From: plug-discuss-admin@lists.plug.phoenix.az.us
> [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of Eric
> Thelin
> Sent: Saturday, December 09, 2000 1:44 PM
> To: plug-discuss@lists.plug.phoenix.az.us
> Subject: Masquerading problems
> 
> 
> 
> I trying to use ip masquerading and getting very strange results.  I
> have created an ipchains config script that should work and sort of
> does.  It works fine to both addresses on the gateway machine.  Then I
> try to ping remote addresses.  The first ping and a few following pings
> usually works and then most of the rest are lost.  About 1 in 250 pings
> are returned.  I have actually rebuild the machine from scratch and it
> still does the same thing.  I had it working about 6 months ago and have
> know idea what is different.  My ipchanis config consists of:
> 
> /sbin/depmod -a
> /sbin/modprobe ip_masq_ftp
> echo "1" > /proc/sys/net/ipv4/ip_forward
> echo "1" > /proc/sys/net/ipv4/ip_always_defrag
> /sbin/ipchains -M -S 7200 10 160
> /sbin/ipchains -F
> /sbin/ipchains -P forward DENY
> /sbin/ipchains -A forward -s 192.168.0.0/16 -j MASQ
> 
> Any ideas?  What could even cause this?  Could it be something related
> to the fact that the connection I am trying to share is a cable modem?
> 
> Eric
---
One other thing....

flush properly...

/sbin/ipchains -F input
/sbin/ipchains -F output
/sbin/ipchains -F forward

before you do anything else.

Craig