🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.os.linux.slackware
Article #120

Re: Help with ipmasqadm

#120
From: Dale Woodside
Date: Mon, 06 Aug 2001 05:14
66 lines
3228 bytes
Rhasta wrote:
> 
> On Sun, 5 Aug 2001 17:54:55 -0400, "JP" <pangjo@hotmail.com> wrote:
> 
> >I have been trying to set up port forwarding using ipmasqadm but could not
> >make it work.  I have the following error when I issued the command
> >"ipmasqadm portfw -l":
> >
> >Cound not open "/proc/net/ip_masq/portfw"
> >Cound not open "/proc/net/portfw"
> >Check if you have enabled portforwarding
> >
> >But I have no error messages when I set up the rules using "ipmasqadm
> >portfw".  Also, ip_forward has the value of 1.  But I cannot find
> >"/proc/net/ip_masq/portfw".  How can I enable portfowarding on Slackware
> >2.2.16?
> >
> >Joe
> >
> 
> First, you should upgrade to the latest kernel, as 2.2.16 has a
> vulnerability.


I would second that advice even though kppp may give an
error message which you may be able to ignore.

> 
> Then, for portfw to work with ipmasqadm, you have to compile it either
> in the kernel or as a module. If you compile it as  a module and you
> do not use kmod to load modules on demand, you have to manually insert
> it before doing a port forwarding with ipasqadm.


I had a look at the kernel config files for a 2.2.13 and a
2.2.19 kernel (Mandrake) and the only compile support I could find
for port forwarding were:

# Protocol-specific masquerading support will be built as modules.
#
CONFIG_IP_MASQUERADE_MOD=y
CONFIG_IP_MASQUERADE_IPAUTOFW=m
CONFIG_IP_MASQUERADE_IPPORTFW=m

Of course, you could say y instead of m for modules.
The modules this gives in /lib/modules/2.2.19/ipv4 are:

 ip_masq_autofw.o
 ip_masq_portfw.o

If you have these modules already you can load these modules with:

/sbin/modprobe ip_masq_autofw
/sbin/modprobe ip_masq_portfw

and after checking to see that they loaded with lsmod, the following
entries in /proc/net/ip_masq appear:

autofw
portfw

My guess is that these specific modules should be enough to
enable you to use ipmasqadm as you will now be able to find
/proc/net/ip_masq/portfw   and   /proc/net/ip_masq/autofw.

Dale Woodside
Technical Details
Message-ID: <3B6E27CA.7305AB46@ics.mq.edu.au>
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!news.usyd.edu.au!sunb.ocs.mq.edu.au!not-for-mail
References: <Gbjb7.51271$TW.257159@tor-nn1.netcom.ca> <5inrmtgqk3f3abf828o4e9uak675uuhiuh@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f906c,78567e60a0c020e2
X-Google-Attributes: gidf906c,public
X-Google-Thread: 102983,78567e60a0c020e2
X-Google-Attributes: gid102983,public
X-Google-Thread: 106e9e,78567e60a0c020e2
X-Google-Attributes: gid106e9e,public
X-Google-ArrivalTime: 2001-08-05 22:20:04 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!news.usyd.edu.au!sunb.ocs.mq.edu.au!not-for-mail
From: Dale Woodside <dalew@ics.mq.edu.au>
Newsgroups: alt.os.linux.slackware,aus.computers.linux,comp.os.linux.security
Subject: Re: Help with ipmasqadm
Date: Mon, 06 Aug 2001 15:14:50 +1000
Organization: Macquarie University
Lines: 66
Message-ID: <3B6E27CA.7305AB46@ics.mq.edu.au>
References: <Gbjb7.51271$TW.257159@tor-nn1.netcom.ca> <5inrmtgqk3f3abf828o4e9uak675uuhiuh@4ax.com>
NNTP-Posting-Host: mpce-remote28.ics.mq.edu.au
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.19-4.5mdksecure i686)
X-Accept-Language: en