SUSE 9.3 Professional, problem with masquerading

SUSE 9.3 installed. I configured Squid, LDAP, DNS, Samba and Firewall
server. I enabled masquerading in firewall and everything worked fine. But
how I have DSL connection to the internet and connection resets after 24h, I
wanted to enable client computers from LAN to raise the connection, so I set
"Dial on demand" through YAST. But after the change my masquerading don't
work (I can't connect to the internet from my LAN client computers) even if
I didn't change any configuration about it. The only thing that is working
is my HTML because it goes through proxy server (Squid). I changed back
everything like it was but Internet still not working.

Please help. How to make masquerading work again and how to configure my
connection to reconnect after my ISP disconnect's my SUSE?





Aco

"Aco" <(E-Mail Removed)> wrote in news:d6cdr1$cps$(E-Mail Removed):

> I
> wanted to enable client computers from LAN to raise the connection, so
> I set "Dial on demand" through YAST. But after the change my
> masquerading don't work (I can't connect to the internet from my LAN
> client computers) even if I didn't change any configuration about it.
> The only thing that is working is my HTML because it goes through
> proxy server (Squid). I changed back everything like it was but
> Internet still not working.
>
> Please help. How to make masquerading work again and how to configure
> my connection to reconnect after my ISP disconnect's my SUSE?

I had a problem similar to that on my redhat computer at one time. The
problem appeared to be that when the IP changes as you reconnect, the
firewall script must be run again to get your masquerading back. This was a
long time ago, I think that I had to put the command in /etc/ppp/ip-
up.local.

I use firestarter now and they do use a command like that:

[ohmster@ohmster ppp]$ cat ip-up.local
sh /etc/firestarter/firestarter.sh start
[ohmster@ohmster ppp]$

In you case, it would probably be "restart" and use the name of your
firewall instead of firestarter. Firestarter should do this for you, if you
want to try it out. Very easy to use. More info if you want to see:
http://www.fs-security.com/

--
~Ohmster
ohmster at newsguy dot com