Re: simple firewall for masquerade

[Juhan Ernits <juhan@cc.ioc.ee>]

On Fri, 21 Feb 2003, Adam C Powell IV wrote:

> >Does anybody have a hint on the easiest way to do this?
> >
> apt-get install ipmasq
> 
> It uses ipchains (or its front-end in 2.4), and installs an init.d 
> script which automatically determines at boot time which interface is on 
> the net, and sets up rules accordingly.  Fully automatic everything. 
>  Firewall rules are pretty conservative, but very customizable, and I've 
> never need to open anything up -- its best to err on the conservative 
> side right?


True, it is the easiest way to deal with the problem. The only thing is
that with 2.4 kernels ipmasq uses the backwards compatibility module of
ipchains, which does not have support for e.g. ftp_conntrack and other
such modules. Provided it is not needed, ipmasq is extremely handy
to install and run.

Regards,

Juhan Ernits