467 lines
8.5 KiB
HTML
467 lines
8.5 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
|
|
<HTML
|
|
><HEAD
|
|
><TITLE
|
|
>Requirements for IP Masquerade on Linux 2.0.x</TITLE
|
|
><META
|
|
NAME="GENERATOR"
|
|
CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK
|
|
REL="HOME"
|
|
TITLE="Linux IP Masquerade HOWTO"
|
|
HREF="index.html"><LINK
|
|
REL="UP"
|
|
TITLE="Background Knowledge"
|
|
HREF="ipmasq-background2.0.html"><LINK
|
|
REL="PREVIOUS"
|
|
TITLE="Requirements for IP Masquerade on Linux 2.2.x "
|
|
HREF="kernel-2.2.x-requirements.html"><LINK
|
|
REL="NEXT"
|
|
TITLE="Setting Up IP Masquerade"
|
|
HREF="c472.html"></HEAD
|
|
><BODY
|
|
CLASS="SECT1"
|
|
BGCOLOR="#FFFFFF"
|
|
TEXT="#000000"
|
|
LINK="#0000FF"
|
|
VLINK="#840084"
|
|
ALINK="#0000FF"
|
|
><DIV
|
|
CLASS="NAVHEADER"
|
|
><TABLE
|
|
SUMMARY="Header navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TH
|
|
COLSPAN="3"
|
|
ALIGN="center"
|
|
>Linux IP Masquerade HOWTO</TH
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="left"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="kernel-2.2.x-requirements.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="80%"
|
|
ALIGN="center"
|
|
VALIGN="bottom"
|
|
>Chapter 2. Background Knowledge</TD
|
|
><TD
|
|
WIDTH="10%"
|
|
ALIGN="right"
|
|
VALIGN="bottom"
|
|
><A
|
|
HREF="c472.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
></TABLE
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"></DIV
|
|
><DIV
|
|
CLASS="SECT1"
|
|
><H1
|
|
CLASS="SECT1"
|
|
><A
|
|
NAME="KERNEL-2.0.X-REQUIREMENTS"
|
|
></A
|
|
>2.8. Requirements for IP Masquerade on Linux 2.0.x</H1
|
|
><P
|
|
><SPAN
|
|
CLASS="QUOTE"
|
|
>" <EM
|
|
>** Please refer to <A
|
|
HREF="http://ipmasq.webhop.net/"
|
|
TARGET="_top"
|
|
>IP
|
|
Masquerade Resource</A
|
|
> for the latest information. **</EM
|
|
> "</SPAN
|
|
></P
|
|
><P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
>Any decent computer hardware. See <A
|
|
HREF="faq-hardware.html"
|
|
>Section 7.2</A
|
|
> for more
|
|
details.</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> The 2.0.x kernel source is available from <A
|
|
HREF="http://www.kernel.org/"
|
|
TARGET="_top"
|
|
> http://www.kernel.org/</A
|
|
>.
|
|
</P
|
|
><P
|
|
> NOTE: Most modern Linux <A
|
|
HREF="masq-supported-distributions.html"
|
|
>Section 7.1</A
|
|
> that
|
|
natively come with 2.0.x kernels are typically modular kernels and have
|
|
all the IP Masquerade functionality already included. In such cases,
|
|
there is no need to compile a new Linux kernel. If you are UPGRADING your
|
|
kernel, you should be aware of other programs that might be required and/or
|
|
need to be upgraded as well (mentioned later in this HOWTO).
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> Loadable kernel modules, preferably 2.1.85 or newer is available from
|
|
<A
|
|
HREF="http://home.pi.se/blox/modutils/index.html"
|
|
TARGET="_top"
|
|
> http://home.pi.se/blox/modutils/index.html </A
|
|
> or
|
|
<A
|
|
HREF="ftp://ftp.kernel.org/pub/linux/utils/kernel/modutils "
|
|
TARGET="_top"
|
|
>ftp://ftp.kernel.org/pub/linux/utils/kernel/modutils</A
|
|
>
|
|
(modules-1.3.57 is the minimal requirement)
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>A properly configured and running TCP/IP network running on the Linux machine
|
|
as covered in <A
|
|
HREF="http://www.tldp.org/HOWTO/Net-HOWTO/index.html"
|
|
TARGET="_top"
|
|
>Linux
|
|
NET HOWTO </A
|
|
> and the <A
|
|
HREF="http://www.tldp.org/LDP/nag2/index.html"
|
|
TARGET="_top"
|
|
>Network Administrator's Guide</A
|
|
>Also check out the
|
|
<A
|
|
HREF="http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html#TrinityOS"
|
|
TARGET="_top"
|
|
>TrinityOS</A
|
|
> document which is also authored by David Ranch. TrinityOS is
|
|
a very comprehensive guide to Linux networking. Topics include IP MASQ,
|
|
security, DNS, DHCP, Sendmail, PPP, Diald, NFS, IPSEC-based VPNs, performance
|
|
issues, and many more. There exists over fifty sections in all!</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>Connectivity to the Internet for your Linux host is covered in
|
|
<A
|
|
HREF="http://www.tldp.org/HOWTO/ISP-Hookup-HOWTO.html"
|
|
TARGET="_top"
|
|
>Linux ISP
|
|
Hookup HOWTO</A
|
|
>, <A
|
|
HREF="http://www.tldp.org/HOWTO/PPP-HOWTO/index.html"
|
|
TARGET="_top"
|
|
>Linux PPP HOWTO</A
|
|
>, and
|
|
<A
|
|
HREF="http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html#TrinityOS"
|
|
TARGET="_top"
|
|
>TrinityOS</A
|
|
>. Other helpful HOWTOs could include:
|
|
<A
|
|
HREF="http://www.tldp.org/HOWTO/mini/DHCP/index.html"
|
|
TARGET="_top"
|
|
> Linux DHCP
|
|
mini-HOWTO</A
|
|
>,
|
|
<A
|
|
HREF="http://www.tldp.org/HOWTO/Cable-Modem/index.html"
|
|
TARGET="_top"
|
|
>Linux Cable Modem mini-HOWTO</A
|
|
> and
|
|
<A
|
|
HREF="http://www.tldp.org/HOWTO/DSL-HOWTO/index.html"
|
|
TARGET="_top"
|
|
>Linux DSL HOWTO</A
|
|
></P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>Ipfwadm 2.3.0 or newer is available from
|
|
<A
|
|
HREF="http://www.xos.nl/linux/ipfwadm/download.html"
|
|
TARGET="_top"
|
|
>http://www.xos.nl/linux/ipfwadm/download.html</A
|
|
></P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>More information on version requirements are on the
|
|
<A
|
|
HREF="http://www.xos.nl/linux/ipfwadm/"
|
|
TARGET="_top"
|
|
>Linux IPFWADM page</A
|
|
></P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>If you are interested in running IPCHAINS on a 2.0.x+ kernel, see
|
|
<A
|
|
HREF="http://miaif.lip6.fr/~tarreau/pub/linux-patches/"
|
|
TARGET="_top"
|
|
>Willy Tarreau's
|
|
IPCHAINS enabler for 2.0.36+</A
|
|
> or
|
|
<A
|
|
HREF="http://www.tldp.org/HOWTO/IPCHAINS-HOWTO.html"
|
|
TARGET="_top"
|
|
> Rusty's
|
|
IPCHAINS for 2.0.x kernels</A
|
|
>. Please note that these patches are NOT
|
|
compatible with the IPPORTFW patches for the 2.0.x kernels. Unfortunately,
|
|
its an either/or deal.</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
>Know how to configure, compile, and install a new Linux kernel as described in
|
|
the <A
|
|
HREF="http://www.tldp.org/HOWTO/Kernel-HOWTO/index.html"
|
|
TARGET="_top"
|
|
>Linux Kernel HOWTO</A
|
|
>. This HOWTO does cover kernel compiling but only
|
|
for IP Masquerade related options.</P
|
|
></LI
|
|
></UL
|
|
><P
|
|
><STRONG
|
|
>Here is a list of IP Masquerading patches for 2.0.x kernels:</STRONG
|
|
></P
|
|
><P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
> Steven Clarke's
|
|
<A
|
|
HREF="http://www.ox.compsoc.org.uk/~steve/portforwarding.html"
|
|
TARGET="_top"
|
|
>IP
|
|
PortForwarding (IPPORTFW)</A
|
|
> - <EM
|
|
>RECOMMENDED</EM
|
|
>
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> <A
|
|
HREF="http://ipmasq.webhop.net/ipautofw.tar.gz"
|
|
TARGET="_top"
|
|
>IP AutoForward</A
|
|
>
|
|
- <A
|
|
HREF="http://ipmasq.webhop.net/tcpdeath.html"
|
|
TARGET="_top"
|
|
>NOT
|
|
Recommended</A
|
|
>
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> <A
|
|
HREF="http://ipmasq.webhop.net/redir_0.7.orig.tar.gz"
|
|
TARGET="_top"
|
|
>REDIR</A
|
|
> for TCP
|
|
(REDIR) - NOT Recommended unless required for internal PORTFW
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> <A
|
|
HREF="http://ipmasq.webhop.net/udpred.c.gz"
|
|
TARGET="_top"
|
|
>UDP redirector</A
|
|
>
|
|
(UDPRED) - NOT Recommended
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> PORTFWed FTP:
|
|
|
|
<P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
> If you are going to port forward FTP traffic to an internal FTP server, you
|
|
might need to download <A
|
|
HREF="http://ipmasq.webhop.net/files22/ip_masq-v0.27-for_2.2.18pre9.patch.gz"
|
|
TARGET="_top"
|
|
> Fred Viles's FTP server patch</A
|
|
>
|
|
The reason for "might" is that some
|
|
users have had success without the use of these pathches, while others need it.
|
|
Explicit details on this topic can be found in <A
|
|
HREF="forwarders.html"
|
|
>Section 6.7</A
|
|
> of
|
|
this HOWTO.
|
|
</P
|
|
></LI
|
|
></UL
|
|
>
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> X-Windows display forwarders:
|
|
|
|
<P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
> <A
|
|
HREF="ftp://sunsite.unc.edu/pub/Linux/X11/compress/dxpc-3.7.0.tar.gz"
|
|
TARGET="_top"
|
|
> X-windows forwarding (DXCP)</A
|
|
>
|
|
</P
|
|
></LI
|
|
></UL
|
|
>
|
|
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> PPTP (GRE) and SWAN (IPSEC) VPNs tunneling forwarders:
|
|
|
|
<P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
>If you plan connecting an internal MASQed PC to a remote PPTP server,
|
|
you MUST INSTALL the PPTP-Masquerade kernel patch available from the URLsbelow.
|
|
If you plan on having external PPTP users connect to an internal masqueraded
|
|
PPTP server, not only do you need the kernel patch installed but you also need
|
|
PORTFW support enabled in the kernel. Please see the following URLs for the
|
|
patches and more information:
|
|
</P
|
|
><P
|
|
> <A
|
|
HREF="http://www.impsec.org/linux/masquerade/ip_masq_vpn.html"
|
|
TARGET="_top"
|
|
> John Hardin's VPN Masquerade forwarders</A
|
|
> or the old patch for just
|
|
<A
|
|
HREF="http://ipmasq.webhop.net/ip_masq_pptp.patch.gz"
|
|
TARGET="_top"
|
|
>PPTP Support</A
|
|
>.
|
|
</P
|
|
></LI
|
|
></UL
|
|
>
|
|
|
|
</P
|
|
></LI
|
|
><LI
|
|
><P
|
|
> Game specific patches:
|
|
|
|
<P
|
|
></P
|
|
><UL
|
|
><LI
|
|
><P
|
|
> Glenn Lamb's
|
|
<A
|
|
HREF="http://ipmasq.webhop.net/files20/loose-udp-2.0.36.patch.gz"
|
|
TARGET="_top"
|
|
> LooseUDP for 2.0.36+</A
|
|
> patch.
|
|
</P
|
|
></LI
|
|
></UL
|
|
>
|
|
</P
|
|
></LI
|
|
></UL
|
|
></DIV
|
|
><DIV
|
|
CLASS="NAVFOOTER"
|
|
><HR
|
|
ALIGN="LEFT"
|
|
WIDTH="100%"><TABLE
|
|
SUMMARY="Footer navigation table"
|
|
WIDTH="100%"
|
|
BORDER="0"
|
|
CELLPADDING="0"
|
|
CELLSPACING="0"
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="kernel-2.2.x-requirements.html"
|
|
ACCESSKEY="P"
|
|
>Prev</A
|
|
></TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="index.html"
|
|
ACCESSKEY="H"
|
|
>Home</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="c472.html"
|
|
ACCESSKEY="N"
|
|
>Next</A
|
|
></TD
|
|
></TR
|
|
><TR
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="left"
|
|
VALIGN="top"
|
|
>Requirements for IP Masquerade on Linux 2.2.x</TD
|
|
><TD
|
|
WIDTH="34%"
|
|
ALIGN="center"
|
|
VALIGN="top"
|
|
><A
|
|
HREF="ipmasq-background2.0.html"
|
|
ACCESSKEY="U"
|
|
>Up</A
|
|
></TD
|
|
><TD
|
|
WIDTH="33%"
|
|
ALIGN="right"
|
|
VALIGN="top"
|
|
>Setting Up IP Masquerade</TD
|
|
></TR
|
|
></TABLE
|
|
></DIV
|
|
></BODY
|
|
></HTML
|
|
> |