Messages in this thread Patch in this message |  | | From | (Chris Faylor) | Subject | Re: 2.1.17: masquerading still broken | Date | Mon, 23 Dec 1996 16:37:35 GMT |
| |
In article <Pine.LNX.3.95.961222231219.341A-100000@earth.terran.org>, B. James Phillippe <bryan@terran.org> wrote: >Hello All! > > I'm wondering if IP masquerading is working for anyone out there, >past 2.1.8. If anyone has it working, could you offer to help me see what >it is that I've done wrong? FWIW, I hope we're not phasing out the >feature; it's really useful to a lot of people! If it's on indefinite >hold, we might want to consider removing the option from the configuration >process(?). Anyway, I tried applying the posted fix (against 2.1.14), but >that didn't work any differently. Any advice? Or, is "be patient" the >best thing for me to do right now? > >Thanks for consideration, and Merry Christmas to you!
I've gotten masquerading working on 2.1.17 with the patch below. This is a variation of a patch submitted by Matt Cross (profesor@harmless.gweep.net) for 2.1.14.
Once it is installed you also need to:
echo 1 > /proc/sys/net/ipv4/ip_forwarding
Hope this helps.
--- ip_masq.c.2.1.17 Wed Dec 18 15:06:05 1996 +++ ip_masq.c Sun Dec 22 13:56:13 1996 @@ -566,7 +557,10 @@ else timeout = ip_masq_expire->tcp_timeout; skb->csum = csum_partial((void *)(th + 1), size - sizeof(*th), 0); - tcp_v4_check(th, size, iph->saddr, iph->daddr, skb->csum); + th->check = 0; + th->check = tcp_v4_check(th, size, iph->saddr, iph->daddr, + csum_partial ((char *)th, sizeof(*th), + skb->csum)); } ip_masq_set_expire(ms, timeout); ip_send_check(iph); @@ -898,9 +892,11 @@ len - sizeof(struct tcphdr), 0); th = (struct tcphdr *) portptr; th->check = 0; - - tcp_v4_check(th, len, iph->saddr, iph->daddr, - skb->csum); + th->check = tcp_v4_check(th, len, iph->saddr, + iph->daddr, + csum_partial((char *)th, + sizeof(*th), + skb->csum)); /* Check if TCP FIN or RST */ if (th->fin) -- http://www.bbc.com/ cgf@bbc.com "Strange how unreal VMS=>UNIX Solutions Boston Business Computing the real can be."
|  |