Operating Systems > Linux and UNIX

Networking Help!

<< < (3/15) > >>

Master of Reality:
WHenever i try to put something in the iptabls (ie. "iptables -P input accept") it says that that resource is in use or busy for some reason.
How should i go about making it "not busy"?

My kernel still supports ipchains, so i tried those ipchains i mentioned above.

(edit)its because i set up my kernel to use ipchains instead of iptables when i put in he first "ipchains" command.(/edit)

[ April 16, 2002: Message edited by: Master of Reality ]

[ April 18, 2002: Message edited by: Master of Reality ]

Master of Reality:
The ipchains work good enough to provide internet access to my main computer, where i can actuall see what i'm postin a lot easier. No more of this damn lynx.
Tomorrow i shall begin the venture to setup a proxy server, but for now i am happy with the ip masquerading finally working!
       

voidmain:
Hey, I just figured out why RedHat installed "ipchains".  Because ipchains is compiled as a module.  Try using ipchains instead of iptables by first unloading the iptables kernel module and then inserting the ipchains module:

/sbin/rmmod iptable_filter
/sbin/modprobe ipchains

Then run your ipchains commands as you intended originally.

voidmain:
Guess we posted at the same time.  Also regarding webmin.. You can use your browser on one of your desktops on your other machines to connect to your firewall running webmin to configure squid:

http://192.168.0.1:10000

after installing webmin on your firewall box and if your inside firewall ip address is 192.168.0.1. Note for security. It's best to block port 10000 from the outside world and only allow access to it from your inside machines. If not at least configure it to use SSL.

Also, I would *not* put Squid on port 8080. If anything pick a random available port between 3128 and 8080 otherwise leave it on 3128.  8080 is a common port for proxy, thus it's the first one hackers scan for.  The more obscure you can be the better.  Although it would be very wise to block inbound connections to whatever port you put Squid on so then it wouldn't matter one way or the other.

[ April 16, 2002: Message edited by: VoidMain ]

voidmain:
There's nothing wrong with that...

Navigation

[0] Message Index

[#] Next page

[*] Previous page

Go to full version