ICS with knoppix running from CD

[Pinoccio]

Is is possible to set up ICS with knoppix running from CD (Knoppix PC is connected to the internet (= server) and a 2nd PC (Windows 98 SE) sharing this internet connection?
(The PC with knoppix normally runs w2k and the sharing between w2k and w98 is no problem) Knoppix 3.3 has a DHCP server but is it possible to run this without a HD install? I'd like a setup without having to change the settings on the w98 SE machine.
When w2k is running the eth0 has IP 192.168.0.1
I AM a Linux newbie!

[arkaine23]

On the winxp ics server side:
Right click the home netcard > properties, CHECK "Internet Protocol (TCP/IP)", then click on properties > check "Use the following IP address" and input 192.168.0.1 as ip, and
255.255.255.0 as subnet mask, other fields are left blank.

On the knoppix client side:
ifconfig eth0 192.168.0.200 netmask 255.255.255.0 up
route add default gw 192.168.0.1 eth0
echo nameserver 192.168.0.1 >> /etc/resolv.conf


That is how to make knoppix be an ICS client. Sounds like you want to make knoppix into a gateway/router though...

[Pinoccio]

I guess I wasn't clear enough in my questioning.

The PC connected to the internet normally runs w2k and is the server for the ICS for the windows 98 PC. (both PC's can use the same internet connection) When I'm running Knoppix (from CD!) on the w2k machine, there is NO more internet connection for the w98 PC.
I want the w98 machine to be able to use the internet connection, but since w2k isn't running, it's Knoppix that should do the job. The Knoppix (w2k) PC has 2 nic's: 1 for the internet connection (eth0) (sorry, I had this wrong in my 1st mail) and 1 for the connection with the w98 (eth1 with ip 192.168.0.1) The w98 PC has 1 nic. When w2k is running the w98 PC always gets it's IPassigned automatically 192.168.0.134 (I don't know why this is not 192.168.0.2 as I should expect but I'm absolutely not an expert in these things)

[activeco]

Well, I am just learning networking for a few months, but as nobody answered this I'll give it a shot.
The most simplest way is to use knoppix-terminalserver already built into knoppix CD.
You can run it from K=> KNOPPIX => Services => Start Knoppix Terminal Server.
But before starting it, it would be best to (re)configure your eth1 card manually.
Seeing your IP addresses I assume you are behind a router, which means your nic (eth0) goes to the router and not to WAN directly.
That also means that router configure your eth0 IP address, which is 192.168.0.1 and it has a range (DHCP) of IP numbers in that network: 192.168.0.x, with the most probable mask 255.255.255.0, so all 255 last octet numbers are a kind of reserved.
Now if you configure eth1 in the same range, you will get at least a high probability of conflicting with the router and probably even impossible routing.
There are more ways of solving this; either subnetting behind router or much better in your case, manually configuring eth1 for another subnetwork.
Try issuing this command: "ifconfig eth1 172.31.100.100 broadcast 172.31.100.255 netmask 255.255.255.0" . Without quotes, of course.
Now start terminalserver from knoppix which automates some processes.
In Setup, select eth1 (going to win98 machine), accept proposed IP range (starting 172.31.100....) and then select your network card in win98 machine. Leave the first three options checked as they are (just click) OK and for the rest few options keep also clicking OK.
You don't have to do anything else, your new router should be running.
Just to be sure, in DOS prompt on w98, check IP address with "ipconfig x", x being your eth number in w98, probably 0.
(note, in linux it is "ifconfig" command). It should be 172.31.100.250 or so. If not you have to release and restart dhcp (obtain IP address automatically should be checked in TCP/IP tab, in w98, networks section, nic).
To do this use again "ipconfig x /release" and then "ipconfig x /renew".
Now you should have access to the outer space too.
Success.

[Pinoccio]

I found this solution and it seems to work. But I don't know if it's safe?

ifconfig eth1 192.168.0.1 broadcast 192.168.0.255 netmask 255.255.255.0

modprobe ipt_MASQUERADE
iptables -F; iptables -t nat -F; iptables -t mangle -F
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward

[Stephen]

I found this solution and it seems to work. But I don't know if it's safe?

ifconfig eth1 192.168.0.1 broadcast 192.168.0.255 netmask 255.255.255.0

modprobe ipt_MASQUERADE
iptables -F; iptables -t nat -F; iptables -t mangle -F
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward

Try ShieldsUP! from Gbison Research to probe your ports and see if any are open they should all be closed or better yet stealth. Arno's Iptables Firewall is a script for iptables that you should be able to run from the ramdisk as long as you modify the path where it looks for the configuration file and change the default eth0 that is in it for for the gateway to the internet the files are well documented with comments so you should have few problems.