1. Computing & Technology

Linux IP Masquerade How-To

From

 (Aliasing, ARPd) 
 
 * IP: TCP syncookie support (disabled per default) (CONFIG_SYN_COOKIES) [Y/n/?]
 - YES: Recommended : for basic TCP/IP network security
 
 * IP: GRE tunnels over IP (CONFIG_NET_IPGRE) [N/y/m/?]
 - NO: This OPTIONAL selection is to enable PPTP and GRE tunnels through 
 the IP MASQ box
 
 == Non-MASQ options skipped
 == (aliasing, ARPd) 
 
 
 * IP: TCP syncookie support (not enabled per default) (CONFIG_SYN_COOKIES) [Y/n/?]
 - YES: HIGHLY recommended for basic TCP/IP network security
 
 == Non-MASQ options skipped
 == (RARP)
 
 
 * IP: Allow large windows (not recommended if <16Mb of memory) * (CONFIG_SKB_LARGE) [Y/n/?]
 - YES: This is recommended to optimize Linux's TCP window 
 
 == Non-MASQ options skipped
 == (IPv6, IPX, WAN router, etc.)
 
 * Fast switching (read help!) (CONFIG_NET_FASTROUTE) [N/y/?] n
 - NO: This performance optimization is NOT compatible with IP MASQ and/or
 packet filtering
 
 
 == Non-MASQ options skipped
 == (Slow CPU, Telephony, SCSI, I2O, etc. )
 
 == Don't forget to compile in support for hardware that you might need:
 == SCSI: HDs, CDROMs, etc.
 
 
 [ Network device support ]
 
 * Network device support (CONFIG_NETDEVICES) [Y/n/?]
 - YES: Enables the Linux Network device sublayer 
 
 
 == Non-MASQ options skipped
 == (Arcnet) 
 
 
 * Dummy net driver support (CONFIG_DUMMY) [M/n/y/?] 
 - YES: Though OPTIONAL, this option can help when debugging problems
 
 
 == Non-MASQ options skipped
 == (EQL, NICs, Wireless, IrDA, ISDN, etc..)
 
 == Don't forget to compile in support for hardware that you might need:
 == NICs: eth, tr, etc.
 == MODEMs: ppp and/or slip
 == WANs: T1, T3, ISDN, etc.
 == ISDN: for internal ISDN modems
 
 
 [ Character devices ]
 
 == Don't forget to compile in serial port support for modem users
 == Don't forget to compile in mouse support
 
 
 == Non-MASQ options skipped
 == (I2C, Watchdog cards, Ftape, Video for Linux, USB, etc. )
 
 
 [ File systems ]
 
 == Non-MASQ options skipped
 == (Quota, ISO9660, NTFS, etc )
 
 
 * /proc filesystem support (CONFIG_PROC_FS) [Y/n/?]
 - YES: Required to dynamically configure the Linux forwarding 
 and NATing systems
 
 
 == Non-MASQ options skipped
 == (network fs, NLS, video section, sound, kernel hacking) 

So go ahead and "exit" and you should be prompted to save your config.

NOTE: These are just the components you need for IP Masquerade. You will need to select whatever other options needed for your specific setup.

  • Now compile the kernel (make dep; make clean; make bzImage; make modules; make modules_install) , etc. Again, it is beyond the scope of this HOWTO if you have problems compiling your kernel. Please see Section 2.7 for URLs to the KERNEL howto, etc.

  • You will then have move over the kernel binary, update your bootloader (LILO, Grub, etc.), and reboot. If you have questions about kernel compiling, I highly recommend to consult some of the URLs above in this section.

©2012 About.com. All rights reserved.

A part of The New York Times Company.