rules() { stop
# insert connection tracking modules modprobe ip_tables modprobe iptable_filter modprobe ip_conntrack modprobe ip_conntrack_ftp modprobe ipt_state modprobe ipt_LOG modprobe iptable_nat
# allow local-only connections ${IPTABLES} -A INPUT -i lo -j ACCEPT
# free output on any interface to any ip for any service ${IPTABLES} -A OUTPUT -j ACCEPT
# permit answers on already established connections # and permit new connections related to established ones ${IPTABLES} -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# allow incomg ssh connections ${IPTABLES} -A INPUT -p tcp --dport ssh -j ACCEPT
# NAT ${IPTABLES} -t nat -A POSTROUTING -o eth0 -j MASQUERADE
# log everything else ${IPTABLES} -A INPUT -j LOG --log-prefix "FIREWALL:INPUT "
# everything not accepted > /dev/null ${IPTABLES} -P INPUT DROP ${IPTABLES} -P FORWARD DROP
This line here is your problem. You need to either change it to:
${IPTABLES} -P FORWARD ACCEPT
-or-
${IPTABLES} -A FORWARD -s 10.0.0.0/24 -j ACCEPT
-- Andrew Gaffney
-- [EMAIL PROTECTED] mailing list
