Re: [ILUG] Masquerading with SuSE 6.3

From: Alan Sobey (ags at domain tinet.ie)
Date: Mon 07 Feb 2000 - 18:21:02 GMT


I have this in /sbin/init.d/boot.local on SuSE6.3 - works fine. I make no
claims as to the security of it all though :) Afair, there's nothing
masq-specific in the rc.config (apart from interface configuration
settings).

#####
# Setup up IP_Masqing
#
/sbin/modprobe ip_masq_ftp
/sbin/ipchains -M -S 7200 10 160
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.3.0/255.255.255.0 -j MASQ
/sbin/ipchains -I output 1 -i ppp0 -d 255.255.255.255 -j REJECT
/sbin/ipchains -A input -i ppp0
/sbin/ipchains -A output -i ppp0

----- Original Message -----
From: "Niall" <niall at domain mailtest.inpho.ie>
To: <ilug at domain linux.ie>
Sent: Monday, February 07, 2000 5:43 PM
Subject: [ILUG] Masquerading with SuSE 6.3

> Have any of you done this ? I've installed the relevant RPM and made the
> appropriate entries in rc.config and edited the rc.firewall to what seemed
> reasonable, but not joy. It connected via ISDN like a dream (the main
> reason I used SuSE on this box) but the lack of masquerading on an
> Internet gateway is a problem :-) Mind you the firewall is really secure -
> as soon as I start the firewall script, the box itself can't even get out
> of the site, never mind the other clients. A working rc.firewall would be
> much appreciated.



This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:05:22 GMT