Hello,
I'm attempting to follow this wiki to build a test firewall running iptables:
http://gentoo-wiki.com/HOWTO_Iptables_for_newbies#QuickStart
Kernel is 'hardened' with netfilter et al activated.
It looks reasonable and is suppose to be up to date.
My nics are set up in /etc/conf.d/net
iface_eth0="192.168.2.20 broadcast 192.168.2.255 netmask 255.255.255.0"
iface_eth1="192.168.3.11 broadcast 192.168.3.255 netmask 255.255.255.0"
iface_eth2="<snipped> broadcast <snipped> netmask 255.255.255.252"
routes_eth2=( "default gw <snipped>" )
All work fine.
port forwarding is enabled:
Rulesets get saved to /var/lib/iptables/rules-save
As specificed in /etc/conf.d/iptables
and
/etc/init.d/iptables is the script that launces iptables
plus rc-update add iptables default
I think all of this is correct(correct me if I'm wrong).
When I go to /etc/init to write my rules into firewall.sh
as specified in the aforementioned wiki I automatically get
this shoved into the script:
#!/sbin/runscript
# Copyright 1999-2006 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: $
depend() {
}
start() {
}
stop() {
}
restart() {
}
curiously none of the example talk about this.
Is this the correct place to put my script(/etc/init.d/,
which is somewhat similar to the one suggested in the
wiki?
None of the examples I found googling discuss the details of where to put
the script, how to launch it and other such details. Any suggestion
are welcome. I have found lots of example scripts similar to my 3 nic
net/lan/dmz setup though.
Any suggestions are very welcome.
James
--
[email protected] mailing list
