[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: iptables: just a simple routing rule



Thanks to all,

I have found gShield to configure iptables, and it works fine.
I don't have the energy to anderstand extatly how iptables works,
but it works !


Thx a lot,

pev


> ----------------------------------------
> From: staf wagemakers <staf.wagemakers@belgacom.net>
> Sent: Sat Dec 27 16:09:19 CET 2003
> To: <debian-firewall@lists.debian.org>
> Subject: Re: iptables: just a simple routing rule
> 
> 
> On Sat, Dec 27, 2003 at 02:31:31PM +0100, Pierre-Vincent Ledoux wrote:
> <snip>
> > 
> > I have a sub-network, 3 stages upper, 10.0.0.*
> > 
> > One of the box on this subnetwork is a debian box connected both on the
> > 192... with a wireless card and on 10... with a ethernet card.
> > 
> > I just want that this debian box route everything form 10... to the wireless
> > router 192.168.0.254 and everything that come form 192. route to 10.
> > 
> > How can I do that ?
> > 
> > 
> > internet
> >    |
> > router(192.168.0.254)
> >    /(wireless)
> > deb box(192.168.0.253/10.0.0.254)
> >    |
> > subnetwork(10.0.0.*)
> > 
> >
> 
> Your question is more a routing question than an iptables question ;-)
> 
> Anyway, normally the only you have to do is enabling ip forwarding on
> the Debian Box.
> 
> # echo 1 > /proc/sys/net/ipv4/ip_forward
> 
> The network interfaces are already setup on the Debian box, so the
> routing tables should be ok. You can verify them with the "route -n"
> command.
> 
> On the systems in the subnet behind the Debian box you need to add a default 
> route to the Debian Box (10.0.0.x):
> 
> # route add default gw ip_address_10_debian_box
> 
> if you're using Linux.
> 
> On the systems in the 192.168.0.x subnet you need to add a route to the 
> 10.0.0.x subnet:
> 
> # route add -net 192.168.0.0/24 gw ip_address_192_debian_box
> 
> It is also possible to add this last route to the wireless router.
> 
> regards,
> 
> -- 
> Staf Wagemakers
> 
> email:          staf at patat.org
> homepage:       http://staf.patat.org
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 

-----------------------------------------------------
Mail.be, WebMail and Virtual Office
http://www.mail.be



Reply to: