Re: IP Masq and Cable Modem

[Adam Williams <awilliam@xxxxxxxxxxxxx>]

>Well it worked once...
>I setup IP Masquerading as per the HOWTO, manually ran the rc.firewall
>script and it worked! I was able to surf, FTP and Telnet from my
>workstation, thru my RH 7.0 Server and out to the internet via my cable
>modem. So, I added the following line to the rc.local file
>"/etc/rc.d/rc.firewall". I then rebooted the server to make sure it 
would

If this is RH, or anything like RH.  You put a script in /etc/rc.d/init.d 
to handle any service you want to control and startup/shutdown.  The 
script needs to accept the parameters "start" and "stop".  start should 
turn the service on, and stop should turn it off/undo it.  The you link 
from what runlevels you want it to start in.  5 = GUI logon, 3 = 
Multiuser no-gui.  So "cd /etc/rc.d/rc5.d;ln -s ../init.d/firewall 
S60firewall" to start it ever time you enter runlevel five. The numbers 
control what order things start, by a simple directory sort.  Scripts 
starting with "S" are run when a runlevel is entered,  scripts starting 
with "K" are run when you leave a run level.    Firewall you probably 
want to start after basic network services and before any "real" servers.


Theoretically putting something in rc.local should work too, it's just 
"incorrect".

>start automatically and KABOOM, it now does not work. If I try to ping a
>host (on the internet) from my workstation, I get the usual "Request 
timed
>out" error. At the server I have no problem getting out.
>I've tried everything, manually ran the script, tried the suggestions in
>the HOWTO, looked thru the IP Masquerade Mailing List Archives, etc with 
no
>luck. Does anyone have any ideas? I'm kind of thinking something is 
being
>set during bootup that is preventing masquerading from working.
>It worked once, it will work again!


Are you sure in your exploration you didn't do something that you left 
out of your script?  A missing piece that's stopping it from working.  
Also, you set "FORWARD_IPV4=" in /etc/sysconfig/network to be yes/true?

Why not post your firewall script?