Article View: alt.os.linux.slackware
Article #120Re: Help with ipmasqadm
From: Dale Woodside
Date: Mon, 06 Aug 2001 05:14
Date: Mon, 06 Aug 2001 05:14
66 lines
3228 bytes
3228 bytes
Rhasta wrote: > > On Sun, 5 Aug 2001 17:54:55 -0400, "JP" <pangjo@hotmail.com> wrote: > > >I have been trying to set up port forwarding using ipmasqadm but could not > >make it work. I have the following error when I issued the command > >"ipmasqadm portfw -l": > > > >Cound not open "/proc/net/ip_masq/portfw" > >Cound not open "/proc/net/portfw" > >Check if you have enabled portforwarding > > > >But I have no error messages when I set up the rules using "ipmasqadm > >portfw". Also, ip_forward has the value of 1. But I cannot find > >"/proc/net/ip_masq/portfw". How can I enable portfowarding on Slackware > >2.2.16? > > > >Joe > > > > First, you should upgrade to the latest kernel, as 2.2.16 has a > vulnerability. I would second that advice even though kppp may give an error message which you may be able to ignore. > > Then, for portfw to work with ipmasqadm, you have to compile it either > in the kernel or as a module. If you compile it as a module and you > do not use kmod to load modules on demand, you have to manually insert > it before doing a port forwarding with ipasqadm. I had a look at the kernel config files for a 2.2.13 and a 2.2.19 kernel (Mandrake) and the only compile support I could find for port forwarding were: # Protocol-specific masquerading support will be built as modules. # CONFIG_IP_MASQUERADE_MOD=y CONFIG_IP_MASQUERADE_IPAUTOFW=m CONFIG_IP_MASQUERADE_IPPORTFW=m Of course, you could say y instead of m for modules. The modules this gives in /lib/modules/2.2.19/ipv4 are: ip_masq_autofw.o ip_masq_portfw.o If you have these modules already you can load these modules with: /sbin/modprobe ip_masq_autofw /sbin/modprobe ip_masq_portfw and after checking to see that they loaded with lsmod, the following entries in /proc/net/ip_masq appear: autofw portfw My guess is that these specific modules should be enough to enable you to use ipmasqadm as you will now be able to find /proc/net/ip_masq/portfw and /proc/net/ip_masq/autofw. Dale Woodside
Technical Details
Message-ID:
<3B6E27CA.7305AB46@ics.mq.edu.au>Path:
arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!news.usyd.edu.au!sunb.ocs.mq.edu.au!not-for-mailReferences:
<Gbjb7.51271$TW.257159@tor-nn1.netcom.ca> <5inrmtgqk3f3abf828o4e9uak675uuhiuh@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f906c,78567e60a0c020e2 X-Google-Attributes: gidf906c,public X-Google-Thread: 102983,78567e60a0c020e2 X-Google-Attributes: gid102983,public X-Google-Thread: 106e9e,78567e60a0c020e2 X-Google-Attributes: gid106e9e,public X-Google-ArrivalTime: 2001-08-05 22:20:04 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!news1.optus.net.au!optus!news.usyd.edu.au!sunb.ocs.mq.edu.au!not-for-mail From: Dale Woodside <dalew@ics.mq.edu.au> Newsgroups: alt.os.linux.slackware,aus.computers.linux,comp.os.linux.security Subject: Re: Help with ipmasqadm Date: Mon, 06 Aug 2001 15:14:50 +1000 Organization: Macquarie University Lines: 66 Message-ID: <3B6E27CA.7305AB46@ics.mq.edu.au> References: <Gbjb7.51271$TW.257159@tor-nn1.netcom.ca> <5inrmtgqk3f3abf828o4e9uak675uuhiuh@4ax.com> NNTP-Posting-Host: mpce-remote28.ics.mq.edu.au Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.2.19-4.5mdksecure i686) X-Accept-Language: en