[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] iptables and nat
- Subject: Re: [cobalt-users] iptables and nat
- From: Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun Nov 16 18:13:01 2003
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
On Sun, 16 Nov 2003, josh wrote:
> I am about to use a 550 for nat with iptables.
>
> Can someone either post, or give me a pointer if it has already been
> posted, an example of how they modified /etc/rc.d/init.d/iptables to
> enable nat if that is what they did.
>
Don't modify /etc/rc.d/init.d/iptables
It could be changed by updates etc.
Active Monitor fools with the rules in that file also
Make a little script or add to end of /etc/rc.d/rc.local
#======================================================
#Load the NAT module
modprobe iptable_nat
# Turn on IP forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward
# MASQUERADE the connection
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
#=====================================================
The above is a swag, it may get you startede.
Gerald
--
http://frontstreetnetworks.com | http://store.raqware.com
Front Street Networks LLC, 229 Front Street, Ste.#C
New Haven, CT 06513-3203 | phone: +1-203-785-0699