On Thu, 2005-01-20 at 06:16 +0000, Navneet Choudhary wrote:

> a)Enabled IP forwarding
> 
> echo 1 > /proc/sys/net/ipv4/ip_forward
> & added above line in /etc/rc.d/rc.local

Dont put it in rc.local. /etc/sysctl.conf is the right place.
Add teh following in this file:
        net.ipv4.ip_forward = 1



> 
> b)Firewall rules as follows:-
> 

Instead of multiple OUTPUT/FORWARD rules, isnt it simpler to add INPUT
rules on eth0?

>42 # set up IP forwarding and nat
>43 -A POSTROUTING -o eth0 -j SNAT --to 172.21.0.133

As per your network diagram, shouldnt this be eth1? 

- Sandip


--
Sandip Bhattacharya    *    Puroga Technologies   *     [EMAIL PROTECTED]
Work: http://www.puroga.com   *    Home/Blog: http://www.sandipb.net/blog

PGP/GPG Signature: 51A4 6C57 4BC6 8C82 6A65 AE78 B1A1 2280 A129 0FF3



_______________________________________________
ilugd mailinglist -- [email protected]
http://frodo.hserus.net/mailman/listinfo/ilugd
Archives at: http://news.gmane.org/gmane.user-groups.linux.delhi 
http://www.mail-archive.com/[email protected]/

Reply via email to