RE: question

"Ron Calhoun - KCnet WA" <[email protected]>
Newsgroups gmane.network.nocat
Message-ID <[email protected]> 
[root@gateway bin]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         
NoCat      all  --  anywhere             anywhere           

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain NoCat (1 references)
target     prot opt source               destination         
NoCat_Ports  all  --  anywhere             anywhere           
NoCat_Inbound  all  --  anywhere             anywhere           
ACCEPT     all  --  192.168.1.0/24       anywhere           MARK match 0x1 
ACCEPT     all  --  192.168.1.0/24       anywhere           MARK match 0x2 
ACCEPT     tcp  --  192.168.1.0/24       172.20.5.203       tcp dpt:http 
ACCEPT     tcp  --  172.20.5.203         192.168.1.0/24     tcp spt:http 
ACCEPT     tcp  --  192.168.1.0/24       172.20.5.203       tcp dpt:https 
ACCEPT     tcp  --  172.20.5.203         192.168.1.0/24     tcp spt:https 
ACCEPT     all  --  officedc  192.168.1.0/24     
ACCEPT     tcp  --  192.168.1.0/24       officedctcp dpt:domain 
ACCEPT     udp  --  192.168.1.0/24       officedcudp dpt:domain 
DROP       tcp  -- !172.20.5.203         anywhere           tcp dpt:5280 
DROP       all  --  anywhere             anywhere           

Chain NoCat_Inbound (1 references)
target     prot opt source               destination         

Chain NoCat_Ports (1 references)
target     prot opt source               destination         
DROP       tcp  --  anywhere             anywhere           tcp dpt:smtp
MARK match 0x3 
DROP       udp  --  anywhere             anywhere           udp dpt:smtp
MARK match 0x3


eth0      Link encap:Ethernet  HWaddr 00:E0:4C:81:4F:0A  
          inet addr:172.20.5.200  Bcast:172.20.5.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4690 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1300 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:455044 (444.3 Kb)  TX bytes:364639 (356.0 Kb)
          Interrupt:10 Base address:0x8000 

eth1      Link encap:Ethernet  HWaddr 00:10:DC:38:CA:E3  
          inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:9103 errors:0 dropped:0 overruns:0 frame:0
          TX packets:10753 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:860084 (839.9 Kb)  TX bytes:919992 (898.4 Kb)
          Interrupt:11 Base address:0x6000




 NoCat Authentication v0.82

I am able to ping from the gateway (the machine w/ two nics) to the 172x.x.x
and 192.x.x.x networks. I can ping from a laptop w/ a 192.x.x.x addy to the
172.x.x.x card in the gateway machine. I can ping the laptop (192.x.x.x)
from the gateway. I can ping from the gateway machine to other 172.x.x.x
addresses on the network.


I can ping an external ip from the gateway machine
I can get to localhost:5280/status from the 192.x and 172.x networks
I did run test.sh before I installed.

[root@gateway nocat]# vi nocat.log
[2005-04-11 16:26:42] Gateway running on port 5280.
[2005-04-11 16:26:53] Spawning child process 3193.
[2005-04-11 16:26:53] Connection to 172.20.5.200 from 172.20.5.111
[2005-04-11 16:26:53] Serving status page  172.20.5.111
[2005-04-11 16:26:54] Connection to 172.20.5.200 from 172.20.5.111
[2005-04-11 16:26:54] Received notify /favicon.ico from 172.20.5.111
[2005-04-11 16:26:54] Spawning child process 3194.
[2005-04-11 16:32:41] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:32:41] Received notify / from 172.20.5.113
[2005-04-11 16:32:41] Spawning child process 3195.
[2005-04-11 16:32:44] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:32:44] Received notify /favicon.ico from 172.20.5.113
[2005-04-11 16:32:44] Spawning child process 3196.
[2005-04-11 16:33:15] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:33:15] Received notify / from 172.20.5.113
[2005-04-11 16:33:15] Spawning child process 3197.
[2005-04-11 16:33:23] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:33:23] Spawning child process 3198.
[2005-04-11 16:33:23] Serving status page  172.20.5.113
[2005-04-11 16:33:24] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:33:24] Received notify /favicon.ico from 172.20.5.113
[2005-04-11 16:33:24] Spawning child process 3199.
[2005-04-11 16:35:54] Spawning child process 3231.
[2005-04-11 16:35:54] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:35:54] Serving status page  172.20.5.113
[2005-04-11 16:35:54] Spawning child process 3232.
[2005-04-11 16:35:54] Connection to 172.20.5.200 from 172.20.5.113
[2005-04-11 16:35:54] Received notify /favicon.ico from 172.20.5.113
[2005-04-12 11:29:50] Gateway running on port 5280.
[2005-04-12 11:36:20] Connection to 172.20.5.200 from 192.168.1.3
[2005-04-12 11:36:20] Peer  192.168.1.3  requests 172.20.5.200:5280
[2005-04-12 11:36:20] Serving status page  192.168.1.3
[2005-04-12 11:36:20] Spawning child process 3821.
[2005-04-12 11:36:44] Connection to 172.20.5.200 from 192.168.1.3

 
 
 
Ron
  KCnet Office/Technical/Wireless Manager
  570-893-8111
  [email protected]





-----Original Message-----
From: Matt Opie [mailto:[email protected]] 
Sent: Sunday, April 10, 2005 6:08 PM
To: Ron Calhoun - KCnet WA
Subject: Re: [NoCat] question

Hi Ron

My advice to you is to get it running in open mode first.

What is the output of iptables -L?

Can you surf the web from the gateway box?
Be very careful with DNS issues. I have had a hell of a time trying to 
get names to resolve correctly.
Did you run ./test.sh prior to installation and satisfy all dependencies?

Can you see the nocat status page localhost:5280/status?
Does it appear to start correctly does nocat.log look alright?

Cheers

Matt

Ron Calhoun - KCnet WA wrote:

>Hi I'm new to the list
>I've just downloaded and installed the nocat software on two RedHat Linux
>machines (2.4) as it describes here:
>http://www.wi-fiplanet.com/tutorials/article.php/3286631 and here
>http://www.wi-fiplanet.com/tutorials/article.php/10724_3111111_2
>I am having a problem getting the firewall rules to work properly (I
>believe) The gateway server has two nics installed. One with a 172.x.x.x
>address and the other w/ a 192.x.x.x address. I am unable to get to the
>172.x.x.x network by plugging into the 192.x.x.x card with or with out the
>nocat software running.
>
>Please help
>
>
> 
> 
> 
>Ron
>  KCnet Office/Technical/Wireless Manager
>  570-893-8111
>  [email protected]
>
>
>
>_______________________________________________
>NoCat mailing list
>[email protected]
>http://lists.nocat.net/mailman/listinfo/nocat
>  
>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.