> echo 1> /proc/sys/net/ipv4/ip_forward
> iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>
> You can see I am using an dial up connection to connect to the internet.
>
> The question is this.  Am I leaving a really big security hole by doing
> things this way?  Or is this good enough for a home user on a dial up
> connection.

I would really recommend using a more advanced setup, this one doesn't
give you any real protection. The simplest NAT/Firewall system I've found
is firehol: http://firehol.sf.net.
It is a single bash script, and a really easy config file. You can pretty
much just take their example and use it directly for your situation, since
it is fairly trivial.

Andre

Reply via email to