[LUGOS] Debian Sarge kot router&firewall za SiOL ADSL s fiksnim IPjem

[Uroš Zajc]

sebastjan plut wrote:

>... mi dela tezave.
>Namescen imam osnovni sistem + pppoe + iptables.
>PPPoE sem nastavil z pppoeconf, v iptables imam nastelan proxy (ven naj bi slo 
>vse, noter nic).
>S te masine same lahko pingam, z drugih, ki nj bi jim bila ta za router in FW 
>pa ne gre nic. Ne ping ne web...
>Log file pppd-ja je:
>Jul 14 00:09:04 gw pppd[2289]: Connect time 31.1 minutes.
>Jul 14 00:09:04 gw pppd[2289]: Sent 20878 bytes, received 22199 bytes.
>Jul 14 00:09:04 gw pppd[2289]: Couldn't increase MTU to 1500
>Jul 14 00:09:04 gw pppd[2289]: Couldn't increase MRU to 1500
>Jul 14 00:09:04 gw pppd[2289]: Connection terminated.
>Jul 14 00:09:04 gw pppd[2289]: Exit.
>Jul 14 00:09:15 gw pppd[3423]: Plugin rp-pppoe.so loaded.
>Jul 14 00:09:15 gw pppd[3425]: pppd 2.4.3 started by root, uid 0
>Jul 14 00:09:16 gw pppd[3425]: PPP session is 6350
>Jul 14 00:09:16 gw pppd[3425]: Using interface ppp0
>Jul 14 00:09:16 gw pppd[3425]: Connect: ppp0 <--> eth0
>Jul 14 00:09:16 gw pppd[3425]: Couldn't increase MTU to 1500
>Jul 14 00:09:16 gw pppd[3425]: Couldn't increase MRU to 1500
>Jul 14 00:09:16 gw pppd[3425]: Couldn't increase MRU to 1500
>Jul 14 00:09:16 gw pppd[3425]: CHAP authentication succeeded
>Jul 14 00:09:16 gw pppd[3425]: peer from calling number 00:90:1A:40:90:AC 
>authorized
>Jul 14 00:09:16 gw pppd[3425]: local  IP address xxx.xxx.xxx.xxx
>Jul 14 00:09:16 gw pppd[3425]: remote IP address 213.250.19.90
>Jul 14 00:09:16 gw pppd[3425]: primary   DNS address 193.189.160.11
>Jul 14 00:09:16 gw pppd[3425]: secondary DNS address 193.189.160.12
>
>A mi lahko kdo, ki ima na SiOL ADSLju fiksni IP, pokaze svoj dsl-provider file?
>
>____________________
>http://www.email.si/
>
>_______________________________________________
>lugos-list mailing list
>lugos-list at lugos.si
>http://liste2.lugos.si/cgi-bin/mailman/listinfo/lugos-list
>  
>
A kaj temu podobnega  imaš v iptables:

        iptables -t nat -A POSTROUTING -o ppp+ -j MASQUERADE
        iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT


pa še
        echo 1 > /proc/sys/net/ipv4/ip_forward
da omogočiš forwarding prometa?