Oh sorry i didn't fully read the post,
You will also need to add something like this
iptables -I INPUT -i eth0 -j ACCEPT
which will allow anything to connect to the server from inside ( if eth0 is
your internal network card )
put this just before your
iptables -A INPUT -P DROP
Sorry again.
On Tuesday 16 May 2006 08:48, Charles Lacroix wrote:
> Hi,
>
> make sure you have a 1 in this file
> /proc/sys/net/ipv4/ip_forward
>
> echo "1" > /proc/sys/net/ipv4/ip_forward
>
> Other than that, everything looks alright.
>
> later
> Charles
>
> On Tuesday 16 May 2006 08:34, Niki Kovacs wrote:
> > Hi,
> >
> > I have a small home LAN, where one machine (192.168.1.1) connects to the
> > internet via dialup (no DSL here) and shares the connection with IP
> > masquerading. To achieve this, I tried out various recipes found on the
> > internet, and finally put this in /etc/rc.d/rc.local:
> >
> > --8<------ rc.local ------------
> > #!/bin/sh
> > #
> > # This script will be executed *after* all the other init scripts.
> > # You can put your own initialization stuff in here if you don't
> > # want to do the full Sys V style init stuff.
> >
> > touch /var/lock/subsys/local
> >
> > # Setup IP Masquerading
> > iptables -F; iptables -t nat -F; iptables -t mangle -F
> > iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> >
> > # Secure it
> > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> > iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT
> > iptables -P INPUT DROP
> > iptables -A FORWARD -i ppp0 -o ppp0 -j REJECT
> > --8<---------------------------
> >
> > I don't understand much about iptables. Documentation about it is on my
> > TODO list (I'll keep it for after my death:oD).
> >
> > Now I have a problem. I fiddled a bit with NFS, and I had a
> > firewall-related problem with it. In short, when iptables (the firewall)
> > runs, I can't do an NFS mount. But as soon as I stop it (service iptables
> > stop), NFS mounts are possible.
> >
> > Now what can I do to 1) go on sharing my ppp connection 2) be able to do
> > NFS mounts while 3) still having a reasonable secure system?
> >
> > Cheers,
> >
> > Niki Kovacs
> > _______________________________________________
> > CentOS mailing list
> > CentOS@xxxxxxxxxx
> > http://lists.centos.org/mailman/listinfo/centos
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
