From: Michael Shigorin <mike@osdn.org.ua> To: community-en@altlinux.org Cc: community@altlinux.ru Subject: Re: [Comm-en] sharing Internet access Date: Mon, 31 Mar 2003 20:15:54 +0300 Message-ID: <20030331171554.GK3889@osdn.org.ua> (raw) In-Reply-To: <200303311029.03630.djbouley@shaw.ca> On Mon, Mar 31, 2003 at 10:29:03AM -0600, D&J Bouley wrote: > I named our local network "VirtualSkyNet" and my gateway > address to 192.168.0.1 during the set-up. Good. :) > Do I replace the $LOCALNET=192.168.9.0/24 variable with > $VirtualSkyNet=192.168.0.1/24 in the script below? No, it's just the _variable_ name. > I assume I only have to run this script once to get Internet > sharing functional. Well this could be simpler: --- /etc/sysconfig/iptables --- *filter -A INPUT -j tcprules -A FORWARD -j tcprules -A tcprules -i ppp0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A tcprules -i ! ppp0 -m state --state NEW -j ACCEPT -A tcprules -i ppp0 -m state --state INVALID,NEW -j DROP -A tcprules -i ppp0 -j REJECT --reject-with icmp-host-unreachable COMMIT *nat -A POSTROUTING -s 192.168.0.0/24 -o ppp0 -j MASQUERADE COMMIT --- end of /etc/sysconfig/iptables --- (btw, 192.168.0.0/24 and 192.168.0.1/24 are just the same as the last byte would be outside the _network_ address being the _host_ part) Then make sure /etc/sysctl.conf has the line as here: --- net.ipv4.ip_forward = 1 --- (my favorite oops-forgot-it is not to enable forwarding %) To enable it all now, do rmmod ipchains echo "1" > /proc/sys/net/ipv4/ip_forward service iptables restart which will result in stateful firewall with NAT up and running. Well, hopefully -- I didn't actually test this :-) PS: if the internet interface is not ppp0 and say eth1 -- make appropriate changes. PPS: 2ALT: hey if we've broken drakgw we'd really better introduce something yet better ;-) -- ---- WBR, Michael Shigorin <mike@altlinux.ru> ------ Linux.Kiev http://www.linux.kiev.ua/
prev parent reply other threads:[~2003-03-31 17:15 UTC|newest] Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top 2003-03-31 16:29 D&J Bouley 2003-03-31 17:15 ` Michael Shigorin [this message]
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20030331171554.GK3889@osdn.org.ua \ --to=mike@osdn.org.ua \ --cc=community-en@altlinux.org \ --cc=community@altlinux.ru \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux users (in English only) This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/community-en/0 community-en/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 community-en community-en/ http://lore.altlinux.org/community-en \ community-en@lists.altlinux.org community-en@lists.altlinux.ru community-en@lists.altlinux.com public-inbox-index community-en Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.community-en AGPL code for this site: git clone https://public-inbox.org/public-inbox.git