[techtalk] ipmask

Rod Longhofer rlonghofer at optekinc.com
Mon Feb 28 09:33:22 EST 2000


A very good script, that will set up firewalling and ip forwarding can be
found at:
http://www.pointman.org/

Shameless plug for my linux link
http://www.longhofer.com/linux.html


Regards,
Rod Longhofer
> -----Original Message-----
> From:	moebius at ip-solutions.net [SMTP:moebius at ip-solutions.net]
> Sent:	Monday, February 28, 2000 2:36 AM
> To:	techtalk at linuxchix.org
> Subject:	Re: [techtalk] ipmask
> 
> Hey There,
>   In ipchains do this:
> ipchains -A input ALLOW
> ipchains -A output ALLOW
> ipchains -A forward DENY
> ipchains -A forward -s 192.168.0.0/255.255.255.0 -j MASQ
> Make sure that IPForwarding is enabled, it sound like it is.
> Please note that this does not provide real security the IPCHAINS setup
> above is just to get the job done. 
> HTH,
> Harry Hoffman
> Product Systems Specialist
> Restaurants Unlimited Inc.
> 206.634.3082 x. 270
> 
> On Mon, 28 Feb 2000, Newsbite wrote:
> 
> > > hello all
> > >
> > > i have installed red hat 6.1. i have two interfaces. say one is
> > 192.168.0.0
> > > and the other is dedicated 202.54.6.20. squid runs perfect and clients
> are
> > > able to access any sites. i was even able to do url filtering. i would
> now
> > > like to allow ftp, telnet and java based streaming applications
> through
> > > which requires a proper source ip. i am trying to implementent ipmasq.
> i
> > > understand that i need to do something with ipchains. i would
> appreciate
> > it
> > > very much if i am told exactly as to what i should do to enable this
> > service
> > > on my box?
> > >
> > > cheers
> > > sriram
> > 
> > 
> > 
> > ************
> > techtalk at linuxchix.org   http://www.linuxchix.org
> > 
> 
> 
> ************
> techtalk at linuxchix.org   http://www.linuxchix.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://linuxchix.org/pipermail/techtalk/attachments/20000228/09d448c0/attachment.xhtml


More information about the Techtalk mailing list