On Tue, 2003-02-18 at 02:23, Paulo Jorge O. C. Matos wrote: > Great, no more invalid arguments. > But now the lines: > localhost root # iptables -t nat -F > localhost root # iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to > 217.129.146.56 > localhost root # iptables -t nat -n -L > Chain PREROUTING (policy ACCEPT) > target prot opt source destination > > Chain POSTROUTING (policy ACCEPT) > target prot opt source destination > SNAT all -- 0.0.0.0/0 0.0.0.0/0 > to:217.129.146.56 > > Chain OUTPUT (policy ACCEPT) > target prot opt source destination > > The network topology is: > > (192.168.0.1) (217.129.146.56) > LAN ------ [eth0 MYMACHINE eth1] --------- INTERNET > > I want to give full access of users in the LAN to the Internet. What are > the commands I should give to Iptables for that? The rule you have is fine. -- /Martin Never argue with an idiot. They drag you down to their level, then beat you with experience.
