/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Hello, I'm a 'Maquerading' amateur who needs help.

I have a home network, and one of my boxes
is a Linux 'gateway' box connected to the internet via
DSL
The 'gateway' box runs RedHAt 7.1 kerne 2.4.7, and
iptables 1.2.2
This 'gateway' box is my default gateway for the other
boxes on my network.


Following the IP MASQ HOWTO , I created the
rudimentary rc.firewall script:

   depmod -a
   echo  "1" > /proc/sys/net/ipv4/ip_forward
   echo  "1" > /proc/sys/net/ipv4/ip_dynaddr
   iptables -P FORWARD DROP
   iptables -t nat -A POSTROUTING -o ppp0 -j
MASQUERADE

This script does NOT give my other computers access to
the internet.
But when I run this script..

  
   depmod -a
   echo  "1" > /proc/sys/net/ipv4/ip_forward
   echo  "1" > /proc/sys/net/ipv4/ip_dynaddr
   iptables -P FORWARD ACCEPT

ALL my boxes on my network can see the internet.
 
Quite frankly I'm confused by the difference between
the two iptables rulesets above. 

Also I know that setting my forwarding policy to
ACCEPT is insecure, but I don't 
understand why (???!!!). 

THanks for any help

        Pete B.









__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to