problem sharing internet connection

tgnb

I am having trouble sharing my internet connection on my shiny new gentoo box.

I previously had slackware installed on it and was able to share the internet connection without a problem.

my /etc/conf.d/net contains:

iface_eth0="dhcp"
iface_eth1="192.168.0.99 broadcast 192.168.0.255 netmask 255.255.255.0"

my /etc/conf.d/local.start contains:

#Clear all iptables rules at first
iptables -F
iptables -X
iptables -Z

# enable internet sharing
iptables -F; iptables -t nat -F; iptables -t mangle -F
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -m state --state NEW -i ! eth0 -j ACCEPT
iptables -P INPUT DROP

# open ssh port
iptables -A INPUT --protocol tcp --dport 22 -j ACCEPT

This is the same setup i previously had when this box was running slackware. I'm kinda lost as to why this isn't working.

c_kuzmanic · Posted: Fri Apr 19, 2002 12:42 pm Post subject:

Does Internet sharing work without use of ip-tables?

tgnb · Posted: Fri Apr 19, 2002 1:52 pm Post subject: maybe?

I'm not sure what you mean? iptables is what enables the internet sharing afaik. So how would it work without it?

bbibber · Posted: Fri Apr 19, 2002 2:17 pm Post subject: try this

Fragadelic · n00b Joined: 18 Apr 2002 Posts: 26

Can you ping the other computers on the network from the gentoo box?

It may be that the drivers for the nics are not installed(eg-either not compiled in the kernel or the modules have not been loaded).

Also, what does your output from 'ifconfig' look like?

tgnb · Posted: Fri Apr 19, 2002 2:50 pm Post subject: ugh

bbibber: now i feel stupid. i bet you hit the nail on the head. i think in slackware ip forwarding is enabled by default. ... i will check this as soon as i get home

this is why i am starting to love gentoo. it doesnt do things for me. i have to do them myself, therefore learning to understand my system better.
thanks gentoo

gilgames · Posted: Fri Apr 19, 2002 10:50 pm Post subject: Re: ugh

gumbootcha · n00b Joined: 23 Apr 2002 Posts: 5 Location: Philippines

hi! i was reading your thread for the past few days and thanks to you, i was able to setup internet sharing in our home lan.

while i was going through the /etc/conf.d folder, i noticed that there was an iptables script there. i was wondering if anyone knew how to use this script.
in my case, i just used /etc/conf.d/local.start to place the rules and stuff to get my sharing enabled.

thanks.

Mnemia · Guru Joined: 17 May 2002 Posts: 476

gumbootcha · n00b Joined: 23 Apr 2002 Posts: 5 Location: Philippines

will that script automatically activate ip_forward and ip_dynaddr for me?

thanks.

Mnemia · Guru Joined: 17 May 2002 Posts: 476

I'm not actually using NAT/forwarding, so I haven't explicitly tested the proposition, but I think that any iptables command can be initiated through this script. So, yeah, I think that it should work for that purpose. Just set all the commands up by hand or with the help of a GUI tool and get the firewall/routing running, and then type: