Masquerading with Shorewall

[Horty]

Hi all.

 

I've been able to get my palm to access the internet via Mandrake 10 OE and Bluetooth, but only with Shorewall turned off.

 

I am wondering as to how I can edit one of the Shorewall configuration files (masq.conf?) to do the equivalent to the following commands :

 

echo '1' >/proc/sys/net/ipv4/ip_forward

iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

iptables -A FORWARD -i ppp1 -j ACCEPT

 

I have assigned two ip addresses in the 192.168.0.x range to the palm and pc respectively using DUND.

 

Regards,

Horty

[Crashdamage]

I'm no networking guru and I'd have to do some checking, but I think there's something not right with the second line, something with 'POSTROUTING' part doesn't seem right.

 

Why not try using the Shorewall module in Webmin? I know, "What? - a friggin' GUI?" - but it really does make setup of IP masq and NAT in Shorewall easy.

[Horty]

Thanks for your reply, Crash.

 

I had no idea that a GUI front end existed for Shorewall. It seems a bit ironic though that Webmin configures Shorewall, which itself configures iptables.

 

Horty