Suranga Kasturiarachchi wrote:

> Dear all,
> 
> My Linux box has two interfaces(eth0 and eth1). and eth0 connected to 
> internet, eth1 connected to local LAN. the interfaces are using deferent ip. 
> what I want to do is, when the lacal lan user request the internet, I need to 
> resolve there request using iptable. i need to do it without using squid 
> proxy. My internet gateway is 202.51.140.129(eth0) and local land is 
> 192.168.1.0 range.
> 
> Please help me on this matter.

The simplest (though not the safest) way to do this:

echo 1 > /proc/sys/net/ipv4/ip_forward

modprobe iptable_nat

iptables --flush
iptables -t nat --flush
iptables -t mangle --flush

iptables --delete-chain
iptables -t nat --delete-chain
iptables -t mangle --delete-chain

iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

iptables -A INPUT  -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE


> 
> thanks,
> 
> suranga
> 

Henk

--
Henk Roose <[EMAIL PROTECTED]>
CWI - Centrum voor Wiskunde en Informatica
Centre for Mathematics and Computer Science
Amsterdam (NL)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to