Re: firewall blocks ppp0?

[Chuck Gelm <nc8q@gelm.net>]

[-- Attachment #1: Type: text/plain, Size: 1978 bytes --]

How/why did your message arrive as

From:    Haines Brown <brownh@hartford-hwp.com>  Sat 6:55 PM
Subject: firewall blocks ppp0?
     To: linux-newbie@hartford-hwp.com
                     ^^^^^^^^^^^^^^^^^
                      ???????????????

This does not allow a 'reply all'    :-(

Dear Haines Brown:

 I use Roaring Penguin PPPOE. http://www.roaringpenguin.com/pppoe/
I selected permanent connection, but I am unsure if this applies
to eth# or ppp#. :-|  'adsl-setup' and 'adsl-start' are script
names with my application (Roaring Penguin).  I am assuming that
your using the same or similar.

 How do you know "I definitely have eth0 set to be permanently
 up" ?  Actually, I'm betting that it is ppp# that is set to
 demand or permanent.

 It seems that your dsl connection (PPPOE?) application is
setting up IPCHAINS, but your kernel is using IPTABLES.

You can:

- reconfigure (make config) your kernel to use IPCHAINS.

- configure IPTABLES to replace your dsl-connection application's
  attempt to use IPCHAINS.

HTH, Chuck

Haines Brown wrote:
> 
> I'm setting up a copy of RedHat 8.0 on a machine that is intended as a
> standalone machine with DSL access to Internet.
> 
> I have eth0 up and running, and did the adsl-setup with my usual valid
> information. The problem comes trying to make ppp0 active. It tries,
> but cycles between active and inactive.
> 
> When I run adsl-start with debugging, it tells me that I'm set up for
> demand-connection. I definitely have eth0 set to be permanently
> up. Does this alert refer instead to ppp0? If so, perhaps this is what
> I'd expect. Is that right?
> 
> I'm also told: ipchains: Protocol not available
> 
> That sounds to me as if my firewall (which I set to be "high"
> protection), may be blocking the ppp protocol. Does this seem to be
> the case?
> 
> I went to pursue this, and ran ipchains -L, but got the error message
> that this command is incompabible with my kernel.
> 
> What to do?
> 
> Haines Brown

[-- Attachment #2: nsmail8M.TMP --]
[-- Type: message/delivery-status, Size: 384 bytes --]

[-- Attachment #3: nsmailIN.TMP --]
[-- Type: message/rfc822, Size: 2641 bytes --]

From: Chuck Gelm <nc8q@gelm.net>
To: Haines Brown <brownh@hartford-hwp.com>
Cc: linux-newbie@hartford-hwp.com
Subject: Re: firewall blocks ppp0?
Date: Sun, 24 Nov 2002 11:48:58 -0500
Message-ID: <3DE102FA.85D8F85D@gelm.net>

Dear Haines Brown:

 I use Roaring Penguin PPPOE. http://www.roaringpenguin.com/pppoe/
I selected permanent connection, but I am unsure if this applies
to eth# or ppp#. :-|  'adsl-setup' and 'adsl-start' are script
names with my application (Roaring Penguin).  I am assuming that
your using the same or similar.

 How do you know "I definitely have eth0 set to be permanently
 up" ?  Actually, I'm betting that it is ppp# that is set to
 demand or permanent.

 It seems that your dsl connection (PPPOE?) application is
setting up IPCHAINS, but your kernel is using IPTABLES.

You can:

- reconfigure (make config) your kernel to use IPCHAINS.

- configure IPTABLES to replace your dsl-connection application's
  attempt to use IPCHAINS.

HTH, Chuck

Haines Brown wrote:
> 
> I'm setting up a copy of RedHat 8.0 on a machine that is intended as a
> standalone machine with DSL access to Internet.
> 
> I have eth0 up and running, and did the adsl-setup with my usual valid
> information. The problem comes trying to make ppp0 active. It tries,
> but cycles between active and inactive.
> 
> When I run adsl-start with debugging, it tells me that I'm set up for
> demand-connection. I definitely have eth0 set to be permanently
> up. Does this alert refer instead to ppp0? If so, perhaps this is what
> I'd expect. Is that right?
> 
> I'm also told: ipchains: Protocol not available
> 
> That sounds to me as if my firewall (which I set to be "high"
> protection), may be blocking the ppp protocol. Does this seem to be
> the case?
> 
> I went to pursue this, and ran ipchains -L, but got the error message
> that this command is incompabible with my kernel.
> 
> What to do?
> 
> Haines Brown
> -
> To unsubscribe from this list: send the line "unsubscribe linux-newbie" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.linux-learn.org/faqs