Re: ipchains! HOWTO masq?

[Keith Baker <toaster cybercom net>]

Ok...  I sorta get it...

On Tue, 25 Aug 1998, Quant-X Alpha Linux Support wrote:

> on_ipchains () {
>  /sbin/ipchains -F input
creates chain called "input"
>  /sbin/ipchains -F output
duh
>  /sbin/ipchains -F forward
duh
>  /sbin/ipchains -P input   REJECT
sets defualt action to reject
>  /sbin/ipchains -P output  REJECT
same
>  /sbin/ipchains -P forward REJECT
same
>  /sbin/ipchains -A input  -s 192.168.175.0/24 -d 0.0.0.0/0 -i eth0 -j ACCEPT
umm...  whats 0.0.0.0/0 is that "let everything from the 192.168.175.0 network going to any address out"
Where does it go when it is accepted? and how does it know
>  /sbin/ipchains -A output -d 192.168.175.0/24 -s 0.0.0.0/0 -i eth0 -j ACCEPT
anything from the outside go through (Wouldn't that be eth1? (or some
other dev))
> 
alright...  you're losing me...  ack
>  /sbin/ipchains -A input  -d $MYIP -s 0.0.0.0/0 -i $DEV -j ACCEPT
>  /sbin/ipchains -A output -s $MYIP -d 0.0.0.0/0 -i $DEV -j ACCEPT
>  
>  /sbin/ipchains -A forward -b -s 192.168.175.0/24 -d 0.0.0.0/0 -j MASQ
> }
> 
> 
>   ciao - 
>     Stefan
> 
> -- 
> 
> Quant-X Service &                         Ph:  (+43) 4212 6004-0
> Consulting Ges.m.b.H.                     Fax: (+43) 4212 600420
> http://www.quant-x.com                    Email: support@quant-x.com
> 
> -- 
> To unsubscribe: send e-mail to axp-list-request@redhat.com with
> 'unsubscribe' as the subject.  Do not send it to axp-list@redhat.com
> 
>