Re: iptables: just a simple routing rule
Thanks to all,
I have found gShield to configure iptables, and it works fine.
I don't have the energy to anderstand extatly how iptables works,
but it works !
Thx a lot,
pev
> ----------------------------------------
> From: staf wagemakers <staf.wagemakers@belgacom.net>
> Sent: Sat Dec 27 16:09:19 CET 2003
> To: <debian-firewall@lists.debian.org>
> Subject: Re: iptables: just a simple routing rule
>
>
> On Sat, Dec 27, 2003 at 02:31:31PM +0100, Pierre-Vincent Ledoux wrote:
> <snip>
> >
> > I have a sub-network, 3 stages upper, 10.0.0.*
> >
> > One of the box on this subnetwork is a debian box connected both on the
> > 192... with a wireless card and on 10... with a ethernet card.
> >
> > I just want that this debian box route everything form 10... to the wireless
> > router 192.168.0.254 and everything that come form 192. route to 10.
> >
> > How can I do that ?
> >
> >
> > internet
> > |
> > router(192.168.0.254)
> > /(wireless)
> > deb box(192.168.0.253/10.0.0.254)
> > |
> > subnetwork(10.0.0.*)
> >
> >
>
> Your question is more a routing question than an iptables question ;-)
>
> Anyway, normally the only you have to do is enabling ip forwarding on
> the Debian Box.
>
> # echo 1 > /proc/sys/net/ipv4/ip_forward
>
> The network interfaces are already setup on the Debian box, so the
> routing tables should be ok. You can verify them with the "route -n"
> command.
>
> On the systems in the subnet behind the Debian box you need to add a default
> route to the Debian Box (10.0.0.x):
>
> # route add default gw ip_address_10_debian_box
>
> if you're using Linux.
>
> On the systems in the 192.168.0.x subnet you need to add a route to the
> 10.0.0.x subnet:
>
> # route add -net 192.168.0.0/24 gw ip_address_192_debian_box
>
> It is also possible to add this last route to the wireless router.
>
> regards,
>
> --
> Staf Wagemakers
>
> email: staf at patat.org
> homepage: http://staf.patat.org
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>
-----------------------------------------------------
Mail.be, WebMail and Virtual Office
http://www.mail.be
Reply to: