IP forward and Firewall

From: M. Eng <meng50218867.a.t.hotmail.com>
Date: Tue Aug 21 2001 - 07:08:03 EDT

Hi Mickey , Hi everybody

I am still trying to get familiar working....
I hqve qn iPAQ H3660.
I have install Familiar v0.4 and I am still stuck at the network part of the
1rst boot.

What I have ?
The host PC is a Linux Redhat 7.1 machine with a static IP.
This IP isnot behind the firewall and so the machine is directly on the
backbone of the university.
The IP I have been given for the IP is behind the firewall (no direct ftp,
the only traffic available is http and email).

What have I done ?
I have set up a PPP connection like describe in wiki PPPHowto and I tryed to
have a IP Masquerading like explained in IPMasqHowto

Making the connection (iPAQ in COM2), Linux RedHat on the host.
This pqrt is working and I am able to ssh into the ipaq.
Once log in, I can ping khumbu (khumbu.eeng.dcu.ie is my nameserver), and
familiar and other websites.

But when I do ipkg update, It seems that the iPAQ is not able to find the
route to familiar. I have :
Downloading
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
...

ipkg_download: ERROR: Failed to retrieve
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
ipkg_download: Let me try that again so you can see the error message:
wget --passive-ftp -nd -P //usr/lib/ipkg/
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
--00:09:36--
http://familiar.handhelds.org:80/familiar/releases/v0.4/packages/armv4l/Packages
           => `//usr/lib/ipkg//Packages'
Connecting to familiar.handhelds.org:80...
connect: No route to host
Retrying.

Seems like to me that I screw up in the choice of what I should have done
for setting IP Masquerading. Any suggestions ?

Here is my configuration
[root@eaccess /root]# pppd call ipaq
Serial connection established.
Using interface ppp0
Connect: ppp0 <--> /dev/ttyS1
found interface eth1 for proxy arp
local IP address 136.206.35.218
remote IP address 136.206.35.241
Deflate (15) compression enabled

# ping khumbu.eeng.dcu.ie
PING khumbu.eeng.dcu.ie (136.206.35.10): 56 data bytes
64 bytes from 136.206.35.10: icmp_seq=0 ttl=254 time=37.5 ms
64 bytes from 136.206.35.10: icmp_seq=1 ttl=254 time=30.0 ms

--- khumbu.eeng.dcu.ie ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 30.0/33.7/37.5 ms
# ping www.handhelds.org
PING h0.handhelds.org (204.123.13.90): 56 data bytes
64 bytes from 204.123.13.90: icmp_seq=0 ttl=233 time=217.4 ms
64 bytes from 204.123.13.90: icmp_seq=1 ttl=233 time=220.0 ms

--- h0.handhelds.org ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 217.4/218.7/220.0 ms
# ping familiar.handhelds.org
PING h0.handhelds.org (204.123.13.90): 56 data bytes
64 bytes from 204.123.13.90: icmp_seq=0 ttl=233 time=237.4 ms
64 bytes from 204.123.13.90: icmp_seq=1 ttl=233 time=230.0 ms
64 bytes from 204.123.13.90: icmp_seq=2 ttl=233 time=210.1 ms
64 bytes from 204.123.13.90: icmp_seq=3 ttl=233 time=220.1 ms

--- h0.handhelds.org ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 210.1/224.4/237.4 ms

# ipkg update
Downloading
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
...

ipkg_download: ERROR: Failed to retrieve
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
ipkg_download: Let me try that again so you can see the error message:
wget --passive-ftp -nd -P //usr/lib/ipkg/
http://familiar.handhelds.org/familiar/releases/v0.4/packages/armv4l//Packages
--00:09:36--
http://familiar.handhelds.org:80/familiar/releases/v0.4/packages/armv4l/Packages
           => `//usr/lib/ipkg//Packages'
Connecting to familiar.handhelds.org:80...
connect: No route to host
Retrying.

--00:09:39--
http://familiar.handhelds.org:80/familiar/releases/v0.4/packages/armv4l/Packages
  (try: 2) => `//usr/lib/ipkg//Packages'
Connecting to familiar.handhelds.org:80...
connect: No route to host
Retrying.

Here is my configuration.

IPAQ :
#cat /etc/passwd
root:iWuSGrtezXz0E:0:0:root:/root:/bin/sh
daemon:*:1:1:daemon:/usr/sbin:/bin/sh
bin:*:2:2:bin:/bin:/bin/sh
sys:*:3:3:sys:/dev:/bin/sh
ppp::99:99:PPP Account:/tmp:/usr/sbin/pppd
nobody:*:65534:65534:nobody:/home:/bin/sh
ppp::101:101:PPP User:/home/ppp:/sbin/pppd

# cat /etc/ppp/options
-detach
defaultroute
noauth
nocrtscts
lock
lcp-echo-interval 5
lcp-echo-failure 3
/dev/ttySA0
115200

# cat /etc/modules
apm
h3600_ts
sa1100-rtc
slhc
ppp_generic
ppp_async

# cat /etc/hosts
127.0.0.1 localhost pocketpc
136.206.35.218 eaccess.rince.ie eaccess
136.206.37.29 veloce.eeng.dcu.ie veloce

# cat /etc/resolv.conf
nameserver 136.206.35.10
search


On the Host

[root@eaccess /root]# cat /etc/ppp/peers/ipaq
-detach
proxyarp
noauth
nocrtscts
lock
user ppp
connect '/usr/sbin/chat -v -t3 ogin--ogin: ppp'
/dev/ttyS1
115200
136.206.35.218:136.206.35.241

[root@eaccess /root]# cat /proc/sys/net/ipv4/ip_forward
1

[root@eaccess /root]# cat /etc/resolv.conf
nameserver 136.206.35.10
search

[root@eaccess /root]# cat /etc/ppp/options
lock

Thanks in advance

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
Received on Tue Aug 21 03:58:47 2001

This archive was generated by hypermail 2.1.8 : Tue May 04 2004 - 09:38:29 EDT