RE: Firewall for network without NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> Hello all,
>
> I am in the process of learning iptables.  Progress is slow but
> steady, however there is one thing that continues to vex me and it may
> simply be a problem of terminology with regards to finding help.
>
> I'm looking to eventually replace a couple of firewall machines with
> Linux boxes running iptables.  For one of the firewalls, the network
> it protects consists of machines that all have real-world IP
> addresses.  Given the nature of the network and its usage, I am cannot
> institute NAT on the network.
>
> Unfortunately, the difficulty I'm running into is that every tutorial
> I can find has focused on using NAT.
>
> Can someone guide me to the specific rules I need, whether by posting
> them here or pointing me to a tutorial, in order to provide firewall
> services for a network consisting purely of publicly addressable IP's?
>
> Regards,
> Robert Kropiewnicki

the recommended read is:

  http://iptables-tutorial.frozentux.net/iptables-tutorial.html

if you are not interested in NAT, ignore any rules/examples that start with "iptables -t nat ..."

-j



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux