NetFilter
[Top] [All Lists]

Newbie request

To: netfilter@lists.netfilter.org
Subject: Newbie request
From: Nandan Bhat <nlbhat@gmail.com>
Date: Tue, 12 Dec 2006 13:04:49 +0530
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:disposition-notification-to:date:from:user-agent:mime-version:to:subject:content-type:content-transfer-encoding; b=KcFD0RUUI57JKrDhuf6lApVdN+E/PoZfFOOOxEtPkE61YBXzQgL1AJFAv4gIvnIZGJziWbmehjrPd2s+71PgJItj2edRlXienpmM3hwAnFB6OTTKv04sNcwCxovlL6FMRev9i7vt5C5WoAaRtFTUpDAI/pDJ+a5T7kRMeFgXlsE=
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Sender: netfilter-bounces@lists.netfilter.org
User-agent: Thunderbird 1.5.0.5 (Windows/20060719)
Hi,

I am trying to setup an old machine having two NICs with Fedora Core 5.
I have two Class C networks (I hope I got that right).
eth0 is assigned 192.168.1.6/255.255.255.0 .
eth1 is set to DHCP and is part of 192.168.0.0/24 .

I need some machines on 192.168.1.0/24 network to be able to get/send mail using 192.168.0.10 . Mail is limited to these networks and does not go to the outside world.

I have gone through the Linux-IP-Masquerade HOWTO and feel that I don't need a very liberal ruleset. Only smtp,pop functionality, especially connecting with 192.168.0.10 is sufficient.

My question is: Do I need a SNAT rule or should I try something with nat+FORWARD? I just went through iptables manual and am somewhat able to understand the rules in the HOWTO - stronger firewall example.

Thanks in advance,

Nandan Bhat


<Prev in Thread] Current Thread [Next in Thread>