ipchains help....

[buford]

I'm using ipchains to setup a firewall and
allow my 2nd computer access to the internet.
I have a DSL connection w/pppoe. I'm using the ipchains NHF w/rc.firewall script to help me with the setup. Here is my setup..

computer #1
-Slackware 7.1
-two NIC's
eth1 external (connects to DSL modem)
eth0 internal(connected to PC running Win98)

this is the ouput from ifconfig....

bash-2.04# ifconfig
eth0 Link encap:Ethernet HWaddr 00:50 http://www.linuxnewbie.org/ubb/biggrin.gifA:B7:6F:FC
UP BROADCAST RUNNING MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:4 errors:0 dropped:0 overruns:0 carrier:4
collisions:0 txqueuelen:100
Interrupt:11 Base address:0x1800

eth1 Link encap:Ethernet HWaddr 00:50 http://www.linuxnewbie.org/ubb/biggrin.gifA http://www.linuxnewbie.org/ubb/biggrin.gif1:25:45
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4956 errors:0 dropped:0 overruns:0 frame:0
TX packets:4359 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
Interrupt:10 Base address:0x1880

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:3924 Metric:1
RX packets:18 errors:0 dropped:0 overruns:0 frame:0
TX packets:18 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0

ppp0 Link encap:Point-to-Point Protocol
inet addr:64.222.xx.xxx P-t-P:10.19.1.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:4954 errors:0 dropped:0 overruns:0 frame:0
TX packets:4357 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:10

....and the ouput from ipchains


bash-2.04# ipchains -L -v
Chain input (policy ACCEPT: 4393 packets, 2346530 bytes):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports
0 0 ACCEPT udp ------ 0xFF 0x00 ppp0 anywhere anywhere bootps -> bootpc
Chain forward (policy DENY: 0 packets, 0 bytes):
pkts bytes target prot opt tosa tosx ifname mark outsize source destination ports

...so would ppp0 be my external interface?
I have my WIN98 computer configured as ...
IP address = 10.19.1.9
subnet mask = 255.255.255.0
gateway = 10.19.1.1
I have named the computer and given my
ISP's nameserver and domain name.
I can't ping either computer from the other.
Anybody have any suggestions. Sorry for bad formatting.

[Lorithar]

*grins*

I am running similar (7.1 slack, sympatico HSE and a network off the linux box to 2 98's) .... ppp0 is the external interface you pass to ipchains...

[roofrabbit]

Shouldn't there be IP numbers for eth0 and eth1? Do you have IPs setup on the linux box for these cards?

[buford]

Do I have to use the 10.x.x.x number associated with ppp0 as shown in my previous post as my internal network addresses? Just curious why it was there. Or could I use the usual private network IP's? Like 192.168.x.x, etc. So to configure my internal eth0(internal NIC) I would do something like ifconfig eth0 inet 192.168.0.1? Then run pmfirewall to configure my firewall and it should recognize ppp0(external interface assigned IP) and eth0(internal). So, since I'm using dhcp, I don't assign eth1 (external NIC conecting to DSL modem)any IP? Thanks for the help, for some reason ipchains is very confusing for me.

[buford]

I configured my Linux box w/pmfirewall. I'm now able to ping both computers from eachother. I'm now trying to setup IE from my Win98 computer. Does anyone know how to do this? Meanwhile I will search the forums.
Thanks in advance.

[buford]

I got IE configured now on my Win98 box.
Setup error on my part.