[Gllug] imasq inconsistent

Paul Cupis paul at cupis.co.uk
Sun Nov 10 12:49:45 UTC 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 10 November 2002 12:23, Branden Faulls wrote:
> I've been setting up my main debian box for IP-masquerading  using the
> imasq package.  When I am able to get the forwarding working, it works
> brilliantly.  I can ping from all edges and browse the Web from all
> boxes on the wired and wireless network.  Great.
>
> Problem is  that inorder to get masquerading to work, I have to pon/poff
> and imasq repeatedly inorder to get the connection work.  I have tried
> adding /usr/bin/imasq to the end of my pon script, with little success.
>  If I call the script  as a non-root user I get Permission complaints
> about setting IP-tables.  If I call pon as root,  I succeed one time out
> of maybe five attempts.  This scattershot approach is like slapping the
> side of the TV to improve tuning.
>
> I'm chasing my gnubie tail.  Somebody slap some sense into me.
>
> Details:
>
> Debian woody / 2.2.20 kernel / dial-up connection via pon

You need to add a script in /etc/ppp/ip-up.d to run /etc/init.d/ipmasq restart 
and a script in /etc/ppp/ip-down.d to do the same.

Actually, I just checked one of my systems here, and I have set up this file:

paul at main:~$ cat /etc/ppp/ip-up.d/60ipmasq
#! /bin/sh

PATH=/sbin:/bin:/usr/sbin:/usr/bin

test -f /usr/sbin/ipmasq || exit 0

set -e

/usr/sbin/ipmasq
paul at main:~$

Which does the job for me. I have the exact same file in /etc/ppp/ip-down.d 
(hmmm, that should probably be a symlink).

Well, that is how I solved that problem here, but now I look at it again, the 
script should probably call /etc/init.d/ipmasq restart.

Regards,

Paul Cupis
- -- 
paul at cupis.co.uk

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE9zlXzIzuKV+SHX/kRAj7qAJ9qJ7jXEaZkLaOI/3oILh8R0fTrAwCgg90u
F9Jv+6QbIAtwtA63OUNBbNc=
=kZeU
-----END PGP SIGNATURE-----

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug




More information about the GLLUG mailing list