From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Peter Pohlmann" Subject: A problem - connections dies Date: Tue, 27 May 2003 16:37:33 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <006901c324a7$17838720$3801a8c0@Peters> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0058_01C3246E.45EBF540" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0058_01C3246E.45EBF540 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hello list, I have a problem with my masquerading.=20 Can someone supply me a basic configuration. I want to have the private = network open for everything.=20 The current rules are below. Works for pop ,http etc. But ftp is not = proper and connecting to an outside=20 smtp server is a problem too. I can send very small emails but if some = larger email or attachment it stops after transferring some kbs. What = am I missing here ? The server is redhat 9 pppoe to the dsl modem. #!/bin/sh modprobe ip_conntrack_ftp modprobe iptable_nat iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT echo 1 >/proc/sys/net/ipv4/ip_forward echo 1 >/proc/sys/net/ipv4/ip_dynaddr iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS = --clamp-mss-to-pmtu Thank you in advance, Peter ------=_NextPart_000_0058_01C3246E.45EBF540 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Hello list,
 
I have a problem with my masquerading.
Can someone supply me a basic configuration. I want = to have=20 the private network
open for everything.
 
The current rules are below. Works for pop ,http = etc. But ftp=20 is not proper and connecting to an outside
smtp server is a problem too. I can send very small = emails but=20 if some larger email or attachment it stops after transferring some = kbs. =20 What am I missing here ?  The server is redhat 9 pppoe to the dsl=20 modem.
 
#!/bin/sh
 
modprobe ip_conntrack_ftp
modprobe = iptable_nat
iptables -P INPUT ACCEPT
iptables -P OUTPUT=20 ACCEPT
iptables -P FORWARD ACCEPT

echo 1 >/proc/sys/net/ipv4/ip_forward
echo 1=20 >/proc/sys/net/ipv4/ip_dynaddr
 
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -A = FORWARD=20 -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
 
Thank you in advance,
Peter
 

 
 ------=_NextPart_000_0058_01C3246E.45EBF540--