Re: Latest Mandrake
On Sun 17 Dec 2000, Manoj Srivastava wrote:
> >>"Toni" == Toni Mueller <deb-l@tonimueller.org> writes:
>
> You are not hanging out with the right people, then. All you
> need to do to override the package's rules is:
>
> # cp filename.def filename.rule
> # vi filename.rule
Actually, the extension is ".rul", not ".rule".
> Toni> Administrating a set of ipmasq rules together with their
> Toni> respective local exceptions imho is a major headache, and I
> Toni> actually don't see the benefit using ipmasq with it's myriad of
> Toni> config files (you need when trying to override the built-in
> Toni> rules) compared with just running a script like
The cool thing about ipmasq is that it has a concept of what interfaces
are internal and which are external. Only packets going out on the
external interfaces are masqueraded. This is also very useful when there
is more than one external interface (e.g. I have a setup with multiple
dialout configurations over ISDN, each one has its own ipppX interface).
It takes just a little getting used to, but then it's very nice. For
firewalling extra bits (e.g. only allow external connections to come in
to smtp and http, for example) you edit the rules for incoming external,
i.e. I90external.
And simply rerun "ipmasq" should your external interface get a new IP
address.
Paul Slootman
--
home: paul@wurtel.demon.nl http://www.wurtel.demon.nl/
work: paul@murphy.nl http://www.murphy.nl/
debian: paul@debian.org http://www.debian.org/
isdn4linux: paul@isdn4linux.org http://www.isdn4linux.org/
Reply to: