internet/linux works, windows/linux works, net/win doesn't

[DrJones]

I'm trying to set up an internet sharing network under mandrake 9. I have 2 nics in the linux box and one in the windows (winme) all work fine. The windows box gets on the local one with linux fine. I can ssh from the 192.168.* address from the windows to this one without any problems. The linux one gets on the net fine. I ran mandrakes internet conection sharing wizzard just fine with no errors.

I can't get on the net with the windows box though. I can't ping non 192.168 ips either. Under winipcfg the ip of that box is 192.168.1.253, the DNS, DCHP and gateway servers are all 192.168.1.1 (which is what i ssh into to get to work). Any ideas?

Here is this if it might help:

netstat -r
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.1.0 * 255.255.255.0 U 40 0 0 eth0
12.253.128.0 * 255.255.248.0 U 40 0 0 eth1
127.0.0.0 * 255.0.0.0 U 40 0 0 lo
default 12-253-128-1.cl 0.0.0.0 UG 40 0 0 eth1

[0x12d3]

Did you run ipchains, iptables? did you set the default gw in ctrl.panl~network?

[DrJones]

didn't do any of that... from what it sounds like all you have to do is set up your cards and run the wizzard. Though from what i was looking at ip-masquerading (sp) is what the issue is. Any nice mandrake wizzards to set that up?

[baldguy]

If you run iptables try this
iptables -F
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
echo 1 > /proc/sys/net/ipv4/conf/all/forwarding
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
as root and see if you can access the network from your windows box.

This is a wide open setup and I don't recommend it for daily use, just for troubleshooting your firewall

[DrJones]

iptables -F gives:...

/lib/modules/2.4.19-16mdk/kernel/net/ipv4/netfilter/ip_tables.o.gz: init_module: Device or resource busy
Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters.
You may find more information in syslog or the output from dmesg
modprobe: insmod /lib/modules/2.4.19-16mdk/kernel/net/ipv4/netfilter/ip_tables.o.gz failed
modprobe: insmod ip_tables failed
iptables v1.2.5: can't initialize iptables table `filter': iptables who? (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Any way to check and see what's using it and shut them down?

[baldguy]

do an lsmod and look for ip_chains or ip_tables

you probably have ip_chains activated and thats why you can't use ip_tables

[DrJones]

yup, chains are active. I just installed ipv6 stuff for iptables. how do i turn ipchains off?


<edit> nm, i looked at the manpage for insmod and found rmmod. I unloaded ipchains and now from the windows box i can ping ips. I think i just have to set that one's DNS server and i'll be fine now.

[baldguy]

rmmod ip_chains

[DrJones]

Thanks everyone! Finally after 6 months of trying (and waiting for 2 and a half years) the dream has finally come true... i now have a fully working setup with both a windows box and linux box. Both can get online and do everything they have to. Windows box for playing games.... linux box for everything else :)