Re: ipchain and init.d
Jack <ifup@yifan.net> writes:
> where could I put these commands, to be run at the boot time:
>
> ipchain -A forward -s 192.168.0.0/24 -j MASQ
If you're using /etc/network/interfaces, you might have something
like:
iface eth0 inet static
address 192.168.69.1
netmask 255.255.255.0
gateway 192.168.69.254
up /etc/network/firewall
And you'd put your ipchains commands in the firewall script. Call
the script whatever you'd like.
> echo 1 > /proc/sys/net/ipv4/ip_forward
Set `ip_forward=yes' in /etc/network/options.
These files get used by ifup and by /etc/init.d/networking.
/etc/init.d/network is deprecated. I need to update
http://www.newt.com/firewall/ with this info.
--
Bill Wohler <wohler@newt.com> http://www.newt.com/wohler/ GnuPG ID:610BD9AD
Maintainer of comp.mail.mh FAQ and mh-e. Vote Libertarian!
If you're passed on the right, you're in the wrong lane.
Reply to: