Re: Iptables Rule Placement

From: Sergio Pantoja H. (spantoja_at_sdslinux.cl)
Date: 06/08/04


Date: Tue, 8 Jun 2004 17:51:21 -0400

Send the script, you need to read more about iptables
the default chains are:
input
output
forward
prerouting
postrouting
mangle

you can make any chains depends on you and what
control you want to do from different zones.

Regards

"cfh" <cfh@xmail.com> escribió en el mensaje
news:Sbqxc.812$xG1.348@nwrddc01.gnilink.net...
> I have developed a fairly lengthy and complex firewall script. It deals
> primarily with the external interface that connects to the world. I
> want to add rules to enable NAT for the internal LAN. I understand that
> I need a forward rule so the internal and external interfaces forward
> traffic and a NAT rule for masquerading. Is there a preferred place to
> insert these couple of rules within the script? Does it matter since
> NAT is a different table and forward is a different chain than the input
> and output chains? Is this question impossible to answer without seeing
> the actual script?
>



Relevant Pages

  • Re: What is wrong with this rule
    ... > etc but does this by means of port forward from a dedicated firewall. ... In the existing script i have rules set where it needed it's ... > # ALL PPP and DHCP users must set this for the correct EXTERNAL interface ... > I know this relates to the way i have created the chains so where can i go ...
    (comp.os.linux.security)
  • Re: What is wrong with this rule
    ... > etc but does this by means of port forward from a dedicated firewall. ... In the existing script i have rules set where it needed it's ... > # ALL PPP and DHCP users must set this for the correct EXTERNAL interface ... > I know this relates to the way i have created the chains so where can i go ...
    (comp.os.linux.security)
  • What is wrong with this rule
    ... etc but does this by means of port forward from a dedicated firewall. ... In the existing script i have rules set where it needed it's ... # ALL PPP and DHCP users must set this for the correct EXTERNAL interface ... I know this relates to the way i have created the chains so where can i go ...
    (comp.os.linux.security)
  • What is wrong with this rule
    ... etc but does this by means of port forward from a dedicated firewall. ... In the existing script i have rules set where it needed it's ... # ALL PPP and DHCP users must set this for the correct EXTERNAL interface ... I know this relates to the way i have created the chains so where can i go ...
    (comp.os.linux.security)
  • Re: split/isolate network
    ... R> as part of the network set-up? ... R> A script is how you would make it permanent. ... R> writing your own firewall rules. ... R> You'll also want to read up on NAT ...
    (Ubuntu)