Erik: Copy from old

Erik — Thu, 04 Jun 2009 05:18:06 GMT

Copy from old

New page

Masquerading is what Windows calls "Internet Connection Sharing", although you can use it for sharing any network connection.

This is just a basic script to give you the general idea, and to refine upon for yourself.

#!/bin/sh
# Define as appropriate for your setup
# external interface (connected to the internet)
EXT_IF=eth0
# internal interface (connected to your local network)
INT_IF=eth3
# path to your iptables binary - leave this alone on slack
IPTABLES=/usr/sbin/iptables
# We don't want to just forward anything to anyone, or let everything
# into our local network
$IPTABLES -F FORWARD
$IPTABLES -P FORWARD DROP
$IPTABLES -A FORWARD -i $INT_IF -o $EXT_IF -j ACCEPT
$IPTABLES -A FORWARD -i $EXT_IF -o $INT_IF -m state --state ESTABLISHED,RELATED -j ACCEPT
# Do the actual masquerading
$IPTABLES -t nat -F POSTROUTING
$IPTABLES -t nat -A POSTROUTING -o $EXT_IF -j MASQUERADE
# Enable IP packet forwarding
echo 1 > /proc/sys/net/ipv4/ip_forward

[[Category:Security]]

Masquerade - Revision history

Erik: Copy from old