🚀 go-pugleaf

OK, got my Linux gateway box set up (Redhat 6.1), with an ipchains
firewall. Everything's working fine (OK, except that it's stuck in EST
at the moment :-), but...

I'm getting strange masquerading errors while playing Everquest.

For example:

Mar  7 14:11:51 moat kernel: Packet log: output REJECT ppp0 PROTO=1
192.168.0.4:3 192.215.54.49:3 L=56 S=0x00 I=45612 F=0x0000 T=127 (#3) 

(192.168.0.4 is the internal IP for the machine being used for
Everquesting. 'moat' is the name of my gateway box.)

If I've read the output correctly, the REJECT was caused by output rule
#3, and the rejected connection was an ICMP "Host unreachable" error.
This rule is:

# outgoing from local net on remote interface, stuffed masquerading
ipchains -A output -i $extint -s $intnet -d 0.0.0.0/0 -l -j REJECT

($extint is ppp0, $intnet is 192.168.0.0/24)

Yet my masquerading rules are:

ipchains -A forward -i $extint -s $intnet -d 0.0.0.0/0 -j MASQ
ipchains -A forward -s 0.0.0.0/0 -d 0.0.0.0/0 -l -j REJECT

I must be missing something obvious; can someone point me in the right
direction?
-- 
Dr. Nigel Cole
Address 'spamtin' is valid, but 'nhcole' is read more often.