<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML ><HEAD ><TITLE >Requirements for IP Masquerade on Linux 2.0.x</TITLE ><META NAME="GENERATOR" CONTENT="Modular DocBook HTML Stylesheet Version 1.7"><LINK REL="HOME" TITLE="Linux IP Masquerade HOWTO" HREF="index.html"><LINK REL="UP" TITLE="Background Knowledge" HREF="ipmasq-background2.0.html"><LINK REL="PREVIOUS" TITLE="Requirements for IP Masquerade on Linux 2.2.x " HREF="kernel-2.2.x-requirements.html"><LINK REL="NEXT" TITLE="Setting Up IP Masquerade" HREF="c472.html"></HEAD ><BODY CLASS="SECT1" BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#0000FF" VLINK="#840084" ALINK="#0000FF" ><DIV CLASS="NAVHEADER" ><TABLE SUMMARY="Header navigation table" WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TH COLSPAN="3" ALIGN="center" >Linux IP Masquerade HOWTO</TH ></TR ><TR ><TD WIDTH="10%" ALIGN="left" VALIGN="bottom" ><A HREF="kernel-2.2.x-requirements.html" ACCESSKEY="P" >Prev</A ></TD ><TD WIDTH="80%" ALIGN="center" VALIGN="bottom" >Chapter 2. Background Knowledge</TD ><TD WIDTH="10%" ALIGN="right" VALIGN="bottom" ><A HREF="c472.html" ACCESSKEY="N" >Next</A ></TD ></TR ></TABLE ><HR ALIGN="LEFT" WIDTH="100%"></DIV ><DIV CLASS="SECT1" ><H1 CLASS="SECT1" ><A NAME="KERNEL-2.0.X-REQUIREMENTS" ></A >2.8. Requirements for IP Masquerade on Linux 2.0.x</H1 ><P ><SPAN CLASS="QUOTE" >" <EM >** Please refer to <A HREF="http://ipmasq.webhop.net/" TARGET="_top" >IP Masquerade Resource</A > for the latest information. **</EM > "</SPAN ></P ><P ></P ><UL ><LI ><P >Any decent computer hardware. See <A HREF="faq-hardware.html" >Section 7.2</A > for more details.</P ></LI ><LI ><P > The 2.0.x kernel source is available from <A HREF="http://www.kernel.org/" TARGET="_top" > http://www.kernel.org/</A >. </P ><P > NOTE: Most modern Linux <A HREF="masq-supported-distributions.html" >Section 7.1</A > that natively come with 2.0.x kernels are typically modular kernels and have all the IP Masquerade functionality already included. In such cases, there is no need to compile a new Linux kernel. If you are UPGRADING your kernel, you should be aware of other programs that might be required and/or need to be upgraded as well (mentioned later in this HOWTO). </P ></LI ><LI ><P > Loadable kernel modules, preferably 2.1.85 or newer is available from <A HREF="http://home.pi.se/blox/modutils/index.html" TARGET="_top" > http://home.pi.se/blox/modutils/index.html </A > or <A HREF="ftp://ftp.kernel.org/pub/linux/utils/kernel/modutils " TARGET="_top" >ftp://ftp.kernel.org/pub/linux/utils/kernel/modutils</A > (modules-1.3.57 is the minimal requirement) </P ></LI ><LI ><P >A properly configured and running TCP/IP network running on the Linux machine as covered in <A HREF="http://www.tldp.org/HOWTO/Net-HOWTO/index.html" TARGET="_top" >Linux NET HOWTO </A > and the <A HREF="http://www.tldp.org/LDP/nag2/index.html" TARGET="_top" >Network Administrator's Guide</A >Also check out the <A HREF="http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html#TrinityOS" TARGET="_top" >TrinityOS</A > document which is also authored by David Ranch. TrinityOS is a very comprehensive guide to Linux networking. Topics include IP MASQ, security, DNS, DHCP, Sendmail, PPP, Diald, NFS, IPSEC-based VPNs, performance issues, and many more. There exists over fifty sections in all!</P ></LI ><LI ><P >Connectivity to the Internet for your Linux host is covered in <A HREF="http://www.tldp.org/HOWTO/ISP-Hookup-HOWTO.html" TARGET="_top" >Linux ISP Hookup HOWTO</A >, <A HREF="http://www.tldp.org/HOWTO/PPP-HOWTO/index.html" TARGET="_top" >Linux PPP HOWTO</A >, and <A HREF="http://www.ecst.csuchico.edu/~dranch/LINUX/index-linux.html#TrinityOS" TARGET="_top" >TrinityOS</A >. Other helpful HOWTOs could include: <A HREF="http://www.tldp.org/HOWTO/mini/DHCP/index.html" TARGET="_top" > Linux DHCP mini-HOWTO</A >, <A HREF="http://www.tldp.org/HOWTO/Cable-Modem/index.html" TARGET="_top" >Linux Cable Modem mini-HOWTO</A > and <A HREF="http://www.tldp.org/HOWTO/DSL-HOWTO/index.html" TARGET="_top" >Linux DSL HOWTO</A ></P ></LI ><LI ><P >Ipfwadm 2.3.0 or newer is available from <A HREF="http://www.xos.nl/linux/ipfwadm/download.html" TARGET="_top" >http://www.xos.nl/linux/ipfwadm/download.html</A ></P ></LI ><LI ><P >More information on version requirements are on the <A HREF="http://www.xos.nl/linux/ipfwadm/" TARGET="_top" >Linux IPFWADM page</A ></P ></LI ><LI ><P >If you are interested in running IPCHAINS on a 2.0.x+ kernel, see <A HREF="http://miaif.lip6.fr/~tarreau/pub/linux-patches/" TARGET="_top" >Willy Tarreau's IPCHAINS enabler for 2.0.36+</A > or <A HREF="http://www.tldp.org/HOWTO/IPCHAINS-HOWTO.html" TARGET="_top" > Rusty's IPCHAINS for 2.0.x kernels</A >. Please note that these patches are NOT compatible with the IPPORTFW patches for the 2.0.x kernels. Unfortunately, its an either/or deal.</P ></LI ><LI ><P >Know how to configure, compile, and install a new Linux kernel as described in the <A HREF="http://www.tldp.org/HOWTO/Kernel-HOWTO/index.html" TARGET="_top" >Linux Kernel HOWTO</A >. This HOWTO does cover kernel compiling but only for IP Masquerade related options.</P ></LI ></UL ><P ><STRONG >Here is a list of IP Masquerading patches for 2.0.x kernels:</STRONG ></P ><P ></P ><UL ><LI ><P > Steven Clarke's <A HREF="http://www.ox.compsoc.org.uk/~steve/portforwarding.html" TARGET="_top" >IP PortForwarding (IPPORTFW)</A > - <EM >RECOMMENDED</EM > </P ></LI ><LI ><P > <A HREF="http://ipmasq.webhop.net/ipautofw.tar.gz" TARGET="_top" >IP AutoForward</A > - <A HREF="http://ipmasq.webhop.net/tcpdeath.html" TARGET="_top" >NOT Recommended</A > </P ></LI ><LI ><P > <A HREF="http://ipmasq.webhop.net/redir_0.7.orig.tar.gz" TARGET="_top" >REDIR</A > for TCP (REDIR) - NOT Recommended unless required for internal PORTFW </P ></LI ><LI ><P > <A HREF="http://ipmasq.webhop.net/udpred.c.gz" TARGET="_top" >UDP redirector</A > (UDPRED) - NOT Recommended </P ></LI ><LI ><P > PORTFWed FTP: <P ></P ><UL ><LI ><P > If you are going to port forward FTP traffic to an internal FTP server, you might need to download <A HREF="http://ipmasq.webhop.net/files22/ip_masq-v0.27-for_2.2.18pre9.patch.gz" TARGET="_top" > Fred Viles's FTP server patch</A > The reason for "might" is that some users have had success without the use of these pathches, while others need it. Explicit details on this topic can be found in <A HREF="forwarders.html" >Section 6.7</A > of this HOWTO. </P ></LI ></UL > </P ></LI ><LI ><P > X-Windows display forwarders: <P ></P ><UL ><LI ><P > <A HREF="ftp://sunsite.unc.edu/pub/Linux/X11/compress/dxpc-3.7.0.tar.gz" TARGET="_top" > X-windows forwarding (DXCP)</A > </P ></LI ></UL > </P ></LI ><LI ><P > PPTP (GRE) and SWAN (IPSEC) VPNs tunneling forwarders: <P ></P ><UL ><LI ><P >If you plan connecting an internal MASQed PC to a remote PPTP server, you MUST INSTALL the PPTP-Masquerade kernel patch available from the URLsbelow. If you plan on having external PPTP users connect to an internal masqueraded PPTP server, not only do you need the kernel patch installed but you also need PORTFW support enabled in the kernel. Please see the following URLs for the patches and more information: </P ><P > <A HREF="http://www.impsec.org/linux/masquerade/ip_masq_vpn.html" TARGET="_top" > John Hardin's VPN Masquerade forwarders</A > or the old patch for just <A HREF="http://ipmasq.webhop.net/ip_masq_pptp.patch.gz" TARGET="_top" >PPTP Support</A >. </P ></LI ></UL > </P ></LI ><LI ><P > Game specific patches: <P ></P ><UL ><LI ><P > Glenn Lamb's <A HREF="http://ipmasq.webhop.net/files20/loose-udp-2.0.36.patch.gz" TARGET="_top" > LooseUDP for 2.0.36+</A > patch. </P ></LI ></UL > </P ></LI ></UL ></DIV ><DIV CLASS="NAVFOOTER" ><HR ALIGN="LEFT" WIDTH="100%"><TABLE SUMMARY="Footer navigation table" WIDTH="100%" BORDER="0" CELLPADDING="0" CELLSPACING="0" ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" ><A HREF="kernel-2.2.x-requirements.html" ACCESSKEY="P" >Prev</A ></TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" ><A HREF="index.html" ACCESSKEY="H" >Home</A ></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" ><A HREF="c472.html" ACCESSKEY="N" >Next</A ></TD ></TR ><TR ><TD WIDTH="33%" ALIGN="left" VALIGN="top" >Requirements for IP Masquerade on Linux 2.2.x</TD ><TD WIDTH="34%" ALIGN="center" VALIGN="top" ><A HREF="ipmasq-background2.0.html" ACCESSKEY="U" >Up</A ></TD ><TD WIDTH="33%" ALIGN="right" VALIGN="top" >Setting Up IP Masquerade</TD ></TR ></TABLE ></DIV ></BODY ></HTML >