Re: Stuffed ICMP masquerading

Article View: demon.tech.unix

Article #460

#460

From: Nigel Cole
Date: Wed, 08 Mar 2000 00:00

20 lines
1399 bytes

In article <38C61439.52B9920D@oxsemi.com>, Paul Black
<paul.black@oxsemi.com> writes
>Nigel Cole <spamtin@zebekia.demon.co.uk> wrote:
>> If I've read the output correctly, the REJECT was caused by output rule
>> #3, and the rejected connection was an ICMP "Host unreachable" error.
>> This rule is:
>> 
>> # outgoing from local net on remote interface, stuffed masquerading
>> ipchains -A output -i $extint -s $intnet -d 0.0.0.0/0 -l -j REJECT
>> 
>> ($extint is ppp0, $intnet is 192.168.0.0/24)
>
>This rule rejects everything leaving your network.

Surely "rejects everything *that isn't masqueraded* from being allowed
out"? What I'd like to know is why it wasn't masqueraded.

-- 
Dr. Nigel Cole
Address 'spamtin' is valid, but 'nhcole' is read more often.

Technical Details

Message-ID: <ImHNsjAYftx4EwjF@zebekia.demon.co.uk>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk> <38C61439.52B9920D@oxsemi.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fac57,e9cef78eb261a0c1
X-Google-Attributes: gidfac57,public
From: Nigel Cole <spamtin@zebekia.demon.co.uk>
Subject: Re: Stuffed ICMP masquerading
Date: 2000/03/08
Message-ID: <ImHNsjAYftx4EwjF@zebekia.demon.co.uk>
X-Deja-AN: 594912396
X-NNTP-Posting-Host: zebekia.demon.co.uk:158.152.10.198
References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk> <38C61439.52B9920D@oxsemi.com>
X-Trace: news.demon.co.uk 952556255 nnrp-13:20879 NO-IDENT zebekia.demon.co.uk:158.152.10.198
MIME-Version: 1.0
Newsgroups: demon.tech.unix
X-Complaints-To: abuse@demon.net

Reply to Parent Message