> Ok, so we've spotted the $ error (script syntax differs
> from CLI);  command accepted..

The $ in the script indicated it was a variable, which was
being set in your script.  You were setting it to ppp0 in
the script (the EXTIF="ppp0" line).

> Shouldn't this be working now?
>
> [EMAIL PROTECTED] root]# iptables -t nat -A POSTROUTING -o
> EXTIF -s  192.168.0.1/32 -j MASQUERADE

try -o ppp0 instead of -o EXTIF

> [EMAIL PROTECTED] root]# iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
>
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
>
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
>
> The rules don't appear to be writing.

Briefly, there are 3 sections to iptables, nat, mangle and
filter.  iptables defaults to showing filter (the blocking
packets part) by default so:
iptables -L -t nat
will list entries in the NAT table, which is the table you
are modifying.

> Last year I was playing with Firehol, unsuccessfully. RPM
> says it's not  installed, but there are residual files.
> Could these be affecting the  iptables?

Redhat should also support the command:
service iptables status
(or /etc/init.d/iptables status)
which will list all the iptables rules in all tables.  Try
it and see if there is anything listed besides the default
policy lines.

Regards

Daniel

Reply via email to