Hello Jens, we call the firewall script out of pppd's ip-up.d directory and query the interface for it's IP.
We use "-p XXX" in every iptables command for better understanding, this is common standard here. If you are interested I can send you an example. Hermann -----Ursprüngliche Nachricht----- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Jens Werner Gesendet: Dienstag, 9. September 2008 09:52 An: [EMAIL PROTECTED] Betreff: Re: [Voyage-linux] Anybody using pppd on voyage-0.5.2and masquerading? Hello Hermann, > # SNAT INT -> EXT > iptables -t nat -A POSTROUTING -o $EXTERNAL_INTERFACE -p ALL -j SNAT --to > $EXTERNAL_IP I'm just curious, but how do you get the external ip with a dynamic ip uplink? As to iptable's manpage, MASQUERADE is the target to use in such setup. Oh, btw: You can leave "-p ALL" because this is default. Regards Jens _______________________________________________ Voyage-linux mailing list [email protected] http://list.voyage.hk/mailman/listinfo/voyage-linux _______________________________________________ Voyage-linux mailing list [email protected] http://list.voyage.hk/mailman/listinfo/voyage-linux
