Re: AW: [gentoo-user] iptables firewall+nat problem

2003-11-02 Thread Joshua Banks
--- Simon_Kühling <[EMAIL PROTECTED]> wrote: > > http://www.shorewall.net > > ok, shorewall really seems to be quite popular in here :) so i should > give it a try > # emerge shorewall Hi Simon, Like anything new, you will need to get familar with "Shorewalls" web site which is top notch. The

Re: AW: [gentoo-user] iptables firewall+nat problem

2003-11-02 Thread Peter Ruskin
On Sunday 02 Nov 2003 13:28, Simon Kühling wrote: > ok, shorewall really seems to be quite popular in here :) so i should > give it a try > # emerge shorewall Really?? I tried it when I was using Mandrake and didn't like it. What worked for me was the IP-Masquerade-HOWTO.html. With that I do f

AW: [gentoo-user] iptables firewall+nat problem

2003-11-02 Thread Simon Kühling
> --- Simon_Kühling <[EMAIL PROTECTED]> wrote: > > > I wonder if your firewall is blocking ping scans. Disable the > > > firewall and see > > > if you can ping google. > > > > well, you are right - disabling the firewall makes ping work again. > > maybe it is easier to build my own script from s

Re: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Lincoln A. Baxter
I have been running my own personally developed IPTABLES ruleset since I converted from ipchains to iptables. My topology is is pretty simple: WAN (cable modem) ---> eth1 [FW] eth0 ---> [HUB] --> [LAN boxes] Note that I am forwarding port 25 from the FW to an internet mail serv

Re: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Joshua Banks
--- Simon_Kühling <[EMAIL PROTECTED]> wrote: > > I wonder if your firewall is blocking ping scans. Disable the > > firewall and see > > if you can ping google. > > well, you are right - disabling the firewall makes ping work again. > maybe it is easier to build my own script from scratch instea

RE: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Jeffrey Smelser
gshield and shorewall can build you a firewall.. I prefer gshield myself. > > I wonder if your firewall is blocking ping scans. Disable the > > firewall and see > > if you can ping google. > > well, you are right - disabling the firewall makes ping work again. > maybe it is easier to build my

Re: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Simon Kühling
> I wonder if your firewall is blocking ping scans. Disable the > firewall and see > if you can ping google. well, you are right - disabling the firewall makes ping work again. maybe it is easier to build my own script from scratch instead of using the one from gentoo-security-guide. > In my f

Re: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Stephen Boulet
I wonder if your firewall is blocking ping scans. Disable the firewall and see if you can ping google. In my firewall, I do: # Block ping scans iptables -A INPUT -p icmp --icmp-type echo-request -j DROP # ... but not coming from our LAN iptables -A FORWARD -p icmp --icmp-type echo-reply -j DROP

Re: [gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Joshua Banks
Simon, Save your self allot of time and headakeee and download "emerge -p shorewall" Shorewall firewall. IPtables made easy. This site is well maintained has a great mailing list and awesome easy to follow FAQ's for Standalone workstation, 2 nic's and 3 nic setup with DMZ. Shorewall is very light

[gentoo-user] iptables firewall+nat problem

2003-11-01 Thread Simon Kühling
hi everyone, i'm trying to get my gentoo box running as a firewall and nat-router for my home-network. therefore i took the iptables-example script as seen in the gentoo security guide (http://www.gentoo.org/doc/en/gentoo-security.xml#doc_chap12) and modified it a little. the server is able to es