On Mon, 24 Sep 2001, James McP wrote:

> ....
> ....
> I would recommend you use a firewall on the connection.  IPchains should be
> installed by default on a RH71 system.  Put this script file in
> /etc/rc.d/init.d/ as the file ipchains.  It is a very, very, very basic
> ipchains ruleset I wrote from memory.
>
> ---------------------------------
> echo "1" > /proc/sys/net/ipv4/ip_forward
> /sbin/ipchains -F
> /sbin/ipchains -A input -j ACCEPT -i ppp0 -s 0/0 25 -d 0/0  -p tcp
> /sbin/ipchains -P forward REJECT
> /sbin/ipchains -A forward -s 192.168.0.0/5 -j MASQ
> --------------------------------
> ....

   Watch out!  There should already be a /etc/rc.d/init.d/ipchains which
is what's normally used to start and stop the firewall?  The echo command
can be put into rc.local, and the /sbin/ipchains commands can be executed
once, and if they work the setup can be saved with

/sbin/ipchains-save > /etc/sysconfig/ipchains

so it will be automatically used the next time the firewall is started.

-- 
Steven Yellin



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list

Reply via email to