First iptables script - comments please

craigha@xxxxxxxxx (Craig H. Anderson) · Thu, 3 Oct 2002 11:22:28 -0600

I've just tried iptables for the first time
and would like comments on this simiple
script.

Gateway box with
   cable modem on one NIC (eth2)
   2 NIC's connected to local hubs.
   local subnets are 10.0.0.0/24 and 10.0..1.0/24
   only 10.0.0.0 is currently in use

I am successful in getting to the internet
with this script.

# $Id: localFirewall,v 1.1 2002/10/03 16:31:21 craig Exp $
iptables -t nat -A POSTROUTING -o eth2 -j MASQUERADE
iptables -A FORWARD -s 10.0.0.0/24 -j ACCEPT
iptables -A FORWARD -d 10.0.0.0/24 -j ACCEPT
iptables -A FORWARD -j DROP