Configuring the Kernel for IP MasqueradeLinux Network Administrators GuidePrevChapter 11. IP Masquerade and Network Address TranslationNextConfiguring the Kernel for IP Masquerade
To use the IP masquerade facility, your kernel must be compiled with masquerade
support. You must select the following options when configuring a 2.2 series
kernel:
Networking options --->
[*] Network firewalls
[*] TCP/IP networking
[*] IP: firewalling
[*] IP: masquerading
--- Protocol-specific masquerading support will be built as modules.
[*] IP: ipautofw masq support
[*] IP: ICMP masquerading
Note that some of the masquerade support is available only as a kernel module.
This means that you must ensure that you
“make modules” in addition to the usual
“make zImage” when building
your kernel.
The 2.4 series kernels no longer offer IP masquerade support as a kernel
compile time option. Instead, you should select the network packet
filtering option:
Networking options --->
[M] Network packet filtering (replaces ipchains)In the 2.2 series kernels, a number of protocol-specific helper
modules are created during kernel compilation. Some protocols begin with
an outgoing request on one port, and then expect an incoming connection on
another. Normally these cannot be masqueraded, as there is no way of associating
the second connection with the first without peering inside the protocols
themselves. The helper modules do just that; they actually look inside the
datagrams and allow masquerading to work for supported protocols that
otherwise would be impossible to masquerade. The supported protocols are:
ModuleProtocolip_masq_ftpFTPip_masq_ircIRCip_masq_raudioRealAudioip_masq_cuseemeCU-See-Meip_masq_vdoliveFor VDO Liveip_masq_quakeIdSoftware's Quake
You must load these modules manually using the insmod
command to implement them. Note that these modules cannot be loaded using
the kerneld daemon. Each of the modules takes an argument
specifying what ports it will listen on. For the
RealAudio™ module you might use:[1]
# insmod ip_masq_raudio.o ports=7070,7071,7072
The ports you need to specify depend on the protocol. An IP masquerade
mini-HOWTO written by Ambrose Au explains more about the IP masquerade modules
and how to configure them.[2]The netfilter package includes modules that perform
similar functions. For example, to provide connection tracking of FTP
sessions, you'd load and use the ip_conntrack_ ftp and
ip_nat_ ftp.o modules.Notes[1]RealAudio is a trademark of the Progressive Networks Corporation.[2]You can contact Ambrose at
ambrose@writeme.com.PrevHomeNextIP Masquerade and Network Address TranslationUpConfiguring IP Masquerade
Wyszukiwarka
Podobne podstrony:
x 087 2 masq configurationx 087 2 masq configurationx 087 2 masq namelookupsx 087 2 ipx kernelx 087 2 nfs kernelv2x 087 2 nfs kernelv3x 087 2 uucp config filesx 087 2 serial configurationConfigurationExceptionkernel howto 3 clbigwpagydoy3epnkmic3ys7wlqwsg4rlwwgvq clbigwpagydoy3epnkmic3ys7wlqwsg4rlwwgvqKernel HOWTO pl 12 (2)configuration change management81A290Ethereal Config Sniffingkernel h (2)x 087 2 accounting zeroing counterconfigwięcej podobnych podstron