🚀 go-pugleaf

Peter Rye <prye@picu-sgh.demon.co.uk> writes:

> steve@better.demon.co.uk (s t) writes:
> 
> > In article <VZ1RSBAbyvE0Ew6u@jimsmith.demon.co.uk>, Jim Smith wrote:
> > >I am trying to set up an internal network (at home) with access to the
> > >internet.  This is more of an exercise for my interest rather than an
> > >attempt to do something serious. 
> > >
> > >Is what I am trying possible? If so what I am doing wrong?
> > 
> > What you need to do is set up IP masquerading. Some details are
> > available in the NET-2-HOWTO.
> 
> What he really needs to do is recompile the kernel with IP
> forwarding enabled.  IP masquerading might be necessary if he wants
> the other machine to appear as though it has the same IP address as
> his directly connected machine.

No, what he needs to do *is* compile with IP masquerading. He said he
was using 10.* as his IP address which is the reserved class A I
believe, so without masquerading his packets will be dropped at the
first sensible router. Plus of course forwarding packets out onto the
internet with IP numbers that aren't yours is a bad move anyway.

A useful resource is
http://www.xos.nl/linux/ipfwadm/paper/linuxfw.html 
which explains quite clearly how firewalling and masquerading work
under Linux.

Bye

-- 
Mike Welch                                 http://www.tara.demon.co.uk/