Re: [CentOS] Iptables masq traffic limiting

2008-08-31 Thread Robert Spangler
On Sunday 31 August 2008 22:31, Joseph L. Casale wrote: > >We should be talking live. Why don't your join the #centos-social on > > freenode so we can chat real time? > > Robert, > Just got back from my trip and reading that Tutorial, it went on to state > what I now find to be two distinct

RE: [CentOS] Iptables masq traffic limiting

2008-08-31 Thread Joseph L. Casale
>We should be talking live. Why don't your join the #centos-social on freenode >so we can chat real time? Robert, Just got back from my trip and reading that Tutorial, it went on to state what I now find to be two distinct opposite thoughts. Its says at http://iptables-tutorial.frozentux.net/chun

Re: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Indunil Jayasooriya
On Sat, Aug 30, 2008 at 2:56 AM, Joseph L. Casale <[EMAIL PROTECTED]> wrote: > Where is the correct place to control what traffic is masq'ed out? > This is what I have, but I was told the Forward chain isn't the right place > to do this? > > iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE > i

Re: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Robert Spangler
On Friday 29 August 2008 18:38, Joseph L. Casale wrote: > >No port or packet types are needed as everything needs to be MASQed. > > Sorry, I wasn't clear. I only want ports 80/443 translated for internal > clients so I do need a rule of some sorts. We should be talking live. Why don't your joi

RE: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Joseph L. Casale
>No port or packet types are needed as everything needs to be MASQed. Sorry, I wasn't clear. I only want ports 80/443 translated for internal clients so I do need a rule of some sorts. Thanks! jlc ___ CentOS mailing list CentOS@centos.org http://lists.c

Re: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Robert Spangler
On Friday 29 August 2008 17:52, Joseph L. Casale wrote: > >Postrouting is the correct one. After everything is routed it is MASQ > > before leaving the interface. > > That makes sense, but I am stuck at making the transition, should I simply > pull the port specifications from my third line i

RE: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Joseph L. Casale
>Postrouting is the correct one. After everything is routed it is MASQ before >leaving the interface. That makes sense, but I am stuck at making the transition, should I simply pull the port specifications from my third line in the FORWARD chain to the first line in the POSTROUTING chain? iptabl

Re: [CentOS] Iptables masq traffic limiting

2008-08-29 Thread Robert Spangler
On Friday 29 August 2008 17:26, Joseph L. Casale wrote: > Where is the correct place to control what traffic is masq'ed out? > This is what I have, but I was told the Forward chain isn't the right > place to do this? > > iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE > iptables -A FORWAR

[CentOS] Iptables masq traffic limiting

2008-08-29 Thread Joseph L. Casale
Where is the correct place to control what traffic is masq'ed out? This is what I have, but I was told the Forward chain isn't the right place to do this? iptables -A POSTROUTING -t nat -o $WAN -j MASQUERADE iptables -A FORWARD -i $WAN -o $LAN -m state --state RELATED,ESTABLISHED -j ACCEPT iptab