<< | Thread Index | >> ]    [ << | Date Index | >> ]

Subject: Re: masquerading (NAT) through a cipe connection
From: Manuela Guandalini <guandam,AT,gcs-mbh,DOT,de>
Date: Fri, 12 Jan 2001 10:51:23 +0100
In-reply-to: <Pine.LNX.4.21.0101082223460.6926-100000@sugar.truxton.com>

Stefan Froehlich wrote:

> Hi,
> 
>> It appears that packets routed through a cipe connection cannot be
>> masqueraded, like they can through a ppp connection.  In other words,
>> a computer with a cipe connection to the internet cannot perform
>> masquerading for other hosts on the local subnet over the cipe link.
> 
> 
> *gnarf*
> 
> I've been spending about 3 days time on this issue and finally got
> stuck exactly at this point. Merde.
> 
>> Just thought you might like to know...
> 
>  
> Well, at least, I am not alone. If there _is_ a solution for CIPE,
> 2.4.x and SNAT, please let me know...
> 
> Bye,
>   Stefan
> 
I've been working 4 months to figure out, how to go throu a firewall 
with cipe.
It works now with

ipchains -I forward -s foreign.internal.net.ip/24 -d 0.0.0.0/0 -j fw_masq

some machines need a little different variation:
ipchains -I forward -s foreign.internal.net.ip/24 -d 0.0.0.0/0 -j MASQ

It's perhaps not that secure, but it works.

Does this help u too?
hope so.

Bye.
Manu.





<< | Thread Index | >> ]    [ << | Date Index | >> ]