Ipmasq and ipchains question

[OliverW]

Hey peeps,

Got a few questions about those two.
First of all it is working, but I like to understand it a little better.

Okay, ipmasq does the NAT and makes sure you can distribute internet to other computers on your network, ipchains is your firewall, right?

Okay, now I have seen that you can set rules for both ipmasq and ipchains. First of all I'm interested in ipmasq. When I startup my computer I basically can't ping anything, I get something like denied traffic. Okay, then I start ipmasq. Now I can ping my modem (I have ADSL) and can make connection to my provider. My provider works with pptp. Now, when I'm connected to my provider, I still can't ping the outside world, so I have to type ipmasq again. Now I can reach the outside world, and so can other computers on my network.

I really would like to change that, so I don't have to do that everytime.

With ipchains I only have one question. How can I make that it won't print all denied packages on my console, but just in a log file. It's fairly annoying, cause I'm working in textmode (it's my router) and if I'm busy with something it's prints it all over.

BTW I'm using Debian, but I don't think that's making a difference.

Thanks in advance.

[OliverW]

bump

[roger_smith]

In regards to your first question. I'm not sure if you can set ipmasq to start during bootup with a pptp connection. On my debian gateway it is connected to a dynamic adsl connection, it requires to logging in/dialing. Ipmasq is setup to start after the network is configured during boot. For you, you have to start the network manually it seems so you may also have to start ipmasq manually.

But, i'm still a newbie :p

[jumpedintothefire]

pptp runs on ppp so you can put your commands in a file called /etc/ppp/ip-up.local. It gets run after the connection is made.

Hope it helps