Hi all,
I am trying to setup a linux machine as a firewall for my home
network and all is going well until I have tried recently to use the
ipmasqadm tool to redirect html requests to an internal masqed machine. I
was wondering if you might be able to point me in the right direction as I
have the suspision that I am doing something wrong in my firewall script. I
use a cable modem to connect to the internet so I realize that I will have
to make this script smarter but it should work as a test.
Note: I have changed all the ip addresses to protect the inocent.
#!/bin/sh
#----------------------------------------------
# Simple Firewall implementaion
#
# ---------------------------------------------
echo " - Flushing all chains - "
ipchains -F input
ipchains -F forward
ipchains -F output
echo " - Enabling forwarding from internal to external -"
#ipchains -I forward -p tcp -s 192.168.32.6/32 80 -j MASQ
ipchains -A forward -s 192.168.32.0/24 -j MASQ
echo " - Enabling ip masqaurading -"
ipmasqadm portfw -f
ipmasqadm portfw -a -P tcp -L 10.192.1.1 80 -R 192.168.32.6 80
--------------------
and this is the output from ifconfig:
eth0 Link encap:Ethernet HWaddr 00:20:35:D4:39:D1
inet addr:10.192.1.1 Bcast:10.192.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MTU:1500 Metric:1
RX packets:69737 errors:0 dropped:0 overruns:0 frame:0
TX packets:3303 errors:0 dropped:0 overruns:0 carrier:0
collisions:3 txqueuelen:100
Interrupt:10 Base address:0x240
eth1 Link encap:Ethernet HWaddr 10:00:5A:BD:56:E4
inet addr:192.168.32.1 Bcast:192.168.32.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:5627 errors:0 dropped:0 overruns:0 frame:0
TX packets:3682 errors:0 dropped:0 overruns:0 carrier:0
collisions:1 txqueuelen:100
Interrupt:3 Base address:0x300
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:3924 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
If you can shed any light on this I would be most grateful.
Thank you,
Darin Willits
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
