Nefunguji nektere IP adresy pres MASQ

[Ladislav Šolc]

MASQARADING spoustim v rc.local  ipfwadm -F -p masquerade.


IP-Masq. mini HOWTO:

For example, if I'm on a class C subnet, I would have entered: 

ipfwadm -F -p deny 
ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0 

--


What appears to be a common mistake is to make the first command be this 

ipfwadm -F -p masquerade

Do not make your default policy be masquerading - otherwise someone who can
manipulate their routing will be able to tunnel straight back through your
gateway, using it to masquerade their identity! 


Jen tak pro informaci :)

Ladas