[ale] Re: Ping through Masq'ing firewall?

[Chris Ricker]

On  3 Jan, Robert L Harris wrote:
>> Robert,
>>
>> If memory serves there's an option in the kernel config for ICMP
>> Masqurade.  Since pings & traceroutes are ICMP packets, make sure this is
>> enabled.  After that... sorry.  Dunno.
>>
> 
> I found a IP Masq, but not ICMP.  Here's the section from "make menuconfig", let me know
> if you see something wrong.

Well, for starters, that looks like a 2.1.x kernel.  If you want to do
IP masquerading with all the features (like ICMP packet support), you
either need 2.0.x or 2.1.x + patches (sorry, don't know which ones) as
the IP masquerading in 2.0.x is more featureful (if that's a word). 
Last I heard, people were working on bringing 2.1.x up-to-date, but I
haven't checked recently to see if that sort of thing's made it in or
not (it may be in 2.1.77, since I didn't look when I compiled it).

Personally, I'd stick with 2.0.33 on your gateway box if you can. 
Switch to that, compile in support for ICMP, and see what happens....

later,
chris

--
Chris Ricker                                 gt1355b at prism.gatech.edu