Kevin Waterson wrote:

> So, something like this in my firewall scripts?
> 
> ipnatctl -I -p tcp -d 203.41.132.76 --dport 53 -b dest -t 192.168.0.2
> --to-port 53
> ipnatctl -I -p udp -d 203.41.132.76 --dport 53 -b dest -t 192.168.0.2
> --to-port 53
> MASQ_NETS="192.168.0.0/24 192.168.1.0/24 "
> 
> for net in $MASQ_NETS 127.0.0.0/8; do
>   $iptables -A INPUT --proto udp --src $net --dport 53 -j ACCEPT
> done

Pass.

I don't know the syntax for ipnatctl.

I could do the equivalent in ipchains for you if you want.

----+------------------------+--------------------------
Del | mailto:[EMAIL PROTECTED] | Christchurch, New Zealand
----+------------------------+--------------------------
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text

Reply via email to