iptables - zoufalstvi - cele

[Jirka 'Eagle' Novák]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

| # Normalne vsechno zakazuju, ale ted uz si nevim rady.
| iptables -P INPUT ACCEPT
| iptables -P OUTPUT ACCEPT
| iptables -P FORWARD ACCEPT
|
| iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
| iptables -A FORWARD -i eth0 -o eth1 -m state --state
ESTABLISHED,RELATED -j
| ACCEPT
| iptables -t nat -A POSTROUTING -o eth0 -s 192.168.10.0/24 -j MASQUERADE

U me to vypada tak, ze nejdriv nastavuju "policy" (jako Vy), pak
vytvarim nove chains (neni nutne), a pak mam NAT. Nakonec nasleduji
vlastni pravidla. Nechce se mi ted premyslet, jestli je to nutne, (pro
me) snazsi bude, kdyz to vyskousite. ;-)

Forward povoluju az na konec (logicky - teprve, az je filter nastaven).
Ale to by take nemelo mit vliv.

- --
Jirka 'Eagle' Novák
registered linux user #173581

E-Mail: eagle na unicode.cz
ICQ:    46044619
Jabber: eagle na jabber.cz
Web:    http://seal.unicode.cz/~eagle/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+zKtT+pLdgedDV5sRAh1xAJ98GfEhue1BYRxkMBIi+n5fMD0zWwCfXaFg
3cVSnW6w53sjfp0Vz4pxjBw=
=wDMI
-----END PGP SIGNATURE-----