On Mon, Jan 21, 2008 at 10:56:27PM -0500, Douglas A. Tutty wrote: > The ipmasq package sets up a basic masquerading firewall based on the > 'net' being in the direction of the default route. If you want more > control of the firewall, install the shorewall-doc package, read it, > then remove ipmasq and install shorewall. While some people write raw > iptables firewalls themselves, most on this list (last I saw a poll) use > shorewall. If you know PF on BSD, you'll feel comfortable with > shorewall. > > You'll also need to turn on IP forwarding in /etc/sysctl.conf
Shorewall can do that too. Just set IP_FORWARDING=On in /etc/shorewall/shorewall.conf Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein)
signature.asc
Description: Digital signature
