Re: Help with iptables forwarding

From: Barton L. Phillips (bartonphillips_at_sbcglobal.net)
Date: 08/16/05

  • Next message: Igmar Palsenberg: "Re: Setting CPU limits" 
    Date: Tue, 16 Aug 2005 00:37:56 GMT

    Bryan Batten wrote:
    > Barton L. Phillips wrote:
    >
    >> ...
    >> Is a dns or hosts addition the only route? Can't I somehow do it
    >> via iptables and routing? Why doesn't the iptables forwarding work?
    >> Is it because it all happens on the local network and doesn't leave
    >> the local NIC at all?
    >
    >
    > A DNS or hosts file is needed to resolve the names used by applications
    > into IP addresses that are used by iptables (the -d and -s parameters).
    >
    > My understanding is the iptables does not route. It controls admission
    > to the routing procedures. You may need something like:
    >
    >
    > -A POSTROUTING -o ppp0 -j SNAT --to-source 10.64.64.64
    >
    >
    > You might take a look at
    >
    > http://en.tldp.org/HOWTO/IP-Masquerade-HOWTO/firewall-examples.html
    >
    > for a very useful cookbook that I used for the basis of my own setup.
    Well that seemed to work just fine. I added
    -A POSTROUTING -o eth1 -j SNAT --to-source <my Internet IP>
    Where eth1 is my local LAN. I'm not sure why that works but it does.

  • Next message: Igmar Palsenberg: "Re: Setting CPU limits"

    Relevant Pages

    • Re: Help with iptables forwarding
      ... > Is a dns or hosts addition the only route? ... Why doesn't the iptables forwarding work? ... My understanding is the iptables does not route. ... to the routing procedures. ...
      (comp.os.linux.security)
    • Re: DNS Manipulation via IPTables or other means?
      ... Not sure about iptables. ... I nwhat way is BIND not scalable -- ... I thought I could alter DNS responses ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
      (Security-Basics)
    • [SLE] An iptables challenge
      ... I'm working on figuring out an issue in iptables, ... connected via a VPN link. ... Each box that needs to connect to the third subnet has a ... static route pointing it to the local terminus of the VPN link currently ...
      (SuSE)
    • Up zone resolving for DNS through IPTABLES security
      ... IPTABLES to provide a firewall, OS is Red Hat Linux 8, BIND 9.2.1. ... I have created a DNS server on this machine which works fine on the ... SYN,RST,ACK SYN -j ACCEPT ...
      (comp.os.linux.security)
    • Re: IPTables issues
      ... You has already sttoped the iptables rules to check if all works fine? ... My mail fails because the server cannot resolve host names ... > Here is a snip from my firewall ruleset concerning DNS. ...
      (RedHat)