NAT on RH 7.3

Hi,

I'm running a RedHat 2.4.18-3 kernel and am using ipchains
for firewalling.

Now I want to get masquerading working, but all the HowTo
refers to is using IPTABLES. Can I continue using ipchains
and if so, where's the howto?

I have tried to use the 3-liner from the :

ipchains -P forward DENY
ipchains -A forward -i eth1 --source <srcaddr> -j MASQ
ipchains -A forward -j DENY --log

...but no source address translation seems to be taking place
(sniffed with Ethereal). This should work, right?

/Dan

In message <3ff113ff$0$69988$(E-Mail Removed)> , Dan Temple
wrote:

> Hi,
>
> I'm running a RedHat 2.4.18-3 kernel and am using ipchains
> for firewalling.
>
> Now I want to get masquerading working, but all the HowTo
> refers to is using IPTABLES. Can I continue using ipchains
> and if so, where's the howto?
>
Wouldn't it be easier to just switch to iptables? That's what I'm using
quite happily on a RH7.3 box for firewall/NAT purposes here.

Dave
--
mail: da (E-Mail Removed) (without the space)
http://www.llondel.org/
So many gadgets, so little time...

"Dan Temple" <(E-Mail Removed)> wrote in message
news:3ff113ff$0$69988$(E-Mail Removed) k...
> Hi,
>
> I'm running a RedHat 2.4.18-3 kernel and am using ipchains
> for firewalling.
>
> Now I want to get masquerading working, but all the HowTo
> refers to is using IPTABLES. Can I continue using ipchains
> and if so, where's the howto?
>
> I have tried to use the 3-liner from the :
>
> ipchains -P forward DENY
> ipchains -A forward -i eth1 --source <srcaddr> -j MASQ
> ipchains -A forward -j DENY --log
>
> ..but no source address translation seems to be taking place
> (sniffed with Ethereal). This should work, right?
>
> /Dan
>

Dan;

I used pmfirewall with ipchains to do the work. It is sweet. Doesn't work
with iptables, however. You stop iptables from working, then get ipchains
working, then install pmfirewall and it works thru the configuration for
you, including masquerading.

Doug