I have a small home/office Microsoft/Novell based network.  I have had an NT
based proxy, NAT, email setup since 1996 sharing a modem and phone line.  I
have made a lot of money from this setup since 1996, it has worked fine and
I have even gone out and setup the same configuration for a lot of small
businesses.

I just purchased a DSL connection and would like to replace the proxy with a
Linux based box.  I have a Linux box up and running Redhat 7.2, two NICS,
IPTables 1.2.4.  ETH0 is bound to my fixed Internet IP Address.  ETH1 is
bound to my internal IP 192.168.0.125.

=================

I have learned to:
Upgrade the kernel (Agent Update)
Update IPTables (Agent Update)
DISABLE IPChains.
Reset IPTables to Default Settings - service iptables stop.
I have a script that feeds new settings to IPTables.  Got this from the book
"Redhat Linux the Complete Ref - Richard Peterson"
I can interrogate the new settings with iptables -L -n and see the
difference in the output from running the script and having just stopped the
service tables stop.

=================
When I have just run - service iptables stop.

>From the Linux box I can:
ping the internet.
Ping both nics on the Linux box.
browse the internet and I suspect any other TCP/IP type function I want to
Ping boxes on the internal network.

Ping ETH1 on the Linux box from the internal boxes on network.

I cannot browse the internet from internal boxes.

=================
When I run the script:
I cannot ping anything from the Linux box.
I cannot browse the internet from the Linux box

I cannot ping the Linux box from a internal network box
I cannot browse the internet from an internal network box

*****************

For the moment I would just like to be able to:
Browse the internet from an internal network box with IPTables turned on
with just enough rules to perform NAT and allow the http request to flow.

Internal network box is Win2k.  IP: 192.168.0.42 Gateway: 192.168.0.125
(ETH1 on Linux box).  All proxy settings in IE6 have been disabled on the
win2k box.

Can someone point me to a simple script to just perform this.




Ron Darling
President Ix.sys, Inc.
http://www.ixsys.com
[EMAIL PROTECTED]
817.377.0925

Attachment: TechTool.gif
Description: GIF image

Reply via email to