Re: [cobalt-users] Total Newbie, please be patient...

[Balázs Nagy <bn@xxxxxxxxxxxxxx>]

> > "Jay Patterson" <jay@xxxxxxxx> writes:
> > > What I think Gerald mean't was "out-of-the-box"
> >
>         Jens Kristian Søgaard wrote
> >  Well, you need to enter a few commands as root. That's pretty much as
> > "out-of-the-box" as it gets.
> >
> Would you please enlighten me.
> What are the few commands that are entered to enable routing and IP
> Masquerading or (NAT)?
>

Assuming you have two NICs, eth0 is your intranet, eth1 goes to the
router/ATM/what have you and your internal net is 192.168.0.0:

#!/bin/sh
route add -net 192.168.0.0 netmask 255.255.255.0 eth0
route add default eth1
ipchains -P forward DENY
ipchains -A forward -i eth1  -j MASQ

the first time you also need this:
echo 1 > /proc/sys/net/ipv4/ip_forward

This is a basic firewall, and don't blame me if people hack fairly easily
your system. If you want to get a stronger firewall, we can take this
off-list...