Re: ipchains

[Adam Tauno Williams <adam@xxxxxxxxxxxxxxxx>]

> Hey gang.  I'm having trouble getting to certain sites (most importantly
> slashdot.org) through my gateway box.  It's running redhat 6.0.  I

So this is kernel version 2.2.5?  And your routing between ethernet and PPP? 
What is your MRU/MTU?   2.2.5 has issues masq-ing packets between large and
small MTU subnets.  If setting your PPP MRU/MTU to 1500 fixes the problem you
need a kernel update.  A box on the Internet should probably be moving to 2.2.16
anyway, do to security exploits.

> Here's the script that runs at startup:
> #!/bin/sh
> echo 1 > /proc/sys/net/ipv4/ip_forward
> ipchains -P forward DENY
> ipchains -A forward -j MASQ -b -s 192.168.0.0/16 -d 0.0.0.0/0
> ipchains -A forward -j MASQ -b -s 192.168.1.0/16 -d 0.0.0.0/0
> modprobe ip_masq_ftp
>
> Is anything missing or just plain wrong???

This looks good.

Systems and Network Administrator
Morrison Industries
1825 Monroe Ave NW.
Grand Rapids, MI. 49505