Re: Stuffed ICMP masquerading

Article View: demon.tech.unix

Article #465

#465

From: Nix
Date: Wed, 15 Mar 2000 00:00

28 lines
1631 bytes

Nigel Cole <spamtin@zebekia.demon.co.uk> writes:

> Mar  7 14:11:51 moat kernel: Packet log: output REJECT ppp0 PROTO=1
> 192.168.0.4:3 192.215.54.49:3 L=56 S=0x00 I=45612 F=0x0000 T=127 (#3) 

This packet hasn't been masqueraded, so it'll be dropped by your
no-unmasqueraded-packets-hit-the-outside-world rule.

> (192.168.0.4 is the internal IP for the machine being used for
> Everquesting. 'moat' is the name of my gateway box.)
> 
> If I've read the output correctly, the REJECT was caused by output rule
> #3, and the rejected connection was an ICMP "Host unreachable" error.

Yep.

> I must be missing something obvious; can someone point me in the right
> direction?

Have you turned on ICMP masquerading (CONFIG_IP_MASQUERADE_ICMP)?

If not, do that.

-- 
`> KNOWLEDGE AND SKILLS
 You must have some, but I don't see any evidence of it.'
   --- Craig Hardie flames a luser recruitment consultant
       advertising `Microsoft based solutions' on uk.comp.os.linux

Technical Details

Message-ID: <87bt4gn030.fsf@loki.wkstn.nix>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fac57,e9cef78eb261a0c1
X-Google-Attributes: gidfac57,public
From: Nix <$}xinix{$@esperi.demon.co.uk>
Subject: Re: Stuffed ICMP masquerading
Date: 2000/03/15
Message-ID: <87bt4gn030.fsf@loki.wkstn.nix>
X-Deja-AN: 597854174
X-NNTP-Posting-Host: esperi.demon.co.uk:194.222.138.8
References: <xuWD+XAfrVx4EwkW@zebekia.demon.co.uk>
X-Emacs: the road to Hell is paved with extensibility.
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 953137282 nnrp-14:11756 NO-IDENT esperi.demon.co.uk:194.222.138.8
Organization: the Core
Newsgroups: demon.tech.unix

Reply to Parent Message