[TriLUG] routing help

[Tom Bryan]

On Saturday 02 February 2002 08:05 am, Greg Brown wrote:

> I also have some ipchains rules set. I wanted to disable any incoming TCP
> connection while allowing any machine on my home network (10.x.x.x) to be
> able to communicate with the outside world.  Here is my ipchains file as it
> exists right now:
...
> Does anyone see where I'm going wrong?  Can anyone offer any suggestions?

It's been a long time, but my notes from the first time I set up forwarding 
with ipchains say that I added the following lines to 
/etc/rc.d/init.d/ipcahins on the box that's connected to the outside world.


IPCHAINS_FORWARD=/proc/sys/net/ipv4/ip_forward
IPCHAINS_DYNAMIC_IP=/proc/sys/net/ipv4/ip_dynaddr

# for 'start'
echo "1" > $IPCHAINS_FORWARD
echo "1" > $IPCHAINS_DYNAMIC_IP

# for 'stop'
echo "0" > $IPCHAINS_FORWARD
echo "0" > $IPCHAINS_DYNAMIC_IP


These lines may be equivalent to clicking on "Network Packet Forwarding" in 
the netcfg GUI's Routing tab.  My notes are somewhat unclear on this point. :)

---Tom