Re: NAT under Gentoo

look at it this way
|WAN| ---- NAT ----- |LAN|
the only traffic that goes from the WAN to
the LAN is reply's sent by requests coming
from the LAN to the WAN.
if someone on the LAN doesnt ask for data
from the WAN, then NOTHING is going
to get to the LAN from the WAN.  in your
case, windows filesharing (smb) will only
hit other machines on the LAN.  the WAN
cannot get to your LAN machines.
*note: what is said above assumes you
only enabled ip masq for LAN -> WAN
(which should be the only thing set up anyways)
-mike

----- Original Message -----
From: "Jaime" <[email protected]>
To: "mike" <[email protected]>
Sent: Friday, August 23, 2002 13:23
Subject: Re: [gentoo-newbies] NAT under Gentoo


Ok, but the clientes are a few windows machines that share resources among
them...there is not any chance that those request pass through the Linux NAT
or get visible under a scanning with the configuration you sugested?

Thanks.

On Friday 23 August 2002 14:26, mike wrote:
> `emerge dhcp dnsmasq`
> `rc-update add dnsmasq default`
> `nano /etc/conf.d/dhcp`
> `cd /etc/dhcp/`
> `cp dhcpd.conf.sample dhcpd.conf`
> `nano dhcpd.conf`
> `rc-update add dhcp default`
> `shutdown -r now`
> as for the iptables blocking of port 139 you wont have to
> ... incoming traffic hits the Gentoo NAT box and well,
> unless you're running samba on the machine (which you
> really shouldnt) port 139 will get REJECTED ;)
> -mike
>
> ----- Original Message -----
> From: "Jaime" <[email protected]>
> To: <[email protected]>
> Sent: Friday, August 23, 2002 12:50
> Subject: [gentoo-newbies] NAT under Gentoo
>
>
> Hi everyone.
>
> I am trying to set up a NAT with my linux box (that uses cablemodem with
> dhcp). The idea is to setup a dhcp server for the clients machines (that
> might be running windows or Linux) to give the clients transparent
Internet
> access (those clientes will only browse, check mail and use ICQ/MSN
> messenger). Some basic firewall will be needed mostly to block port 139 of
> windows shared resources.
>
> I cant find a dhcp server and it looks like the docs at iptables.org are,
> somehow, a little advanced for me or it is more complicated to do than in
> Windows (is this obvious?).
>
> Some pointers about the subject will be greatly appreciated.
>
> Thanks in advance.
> Jaime.
> _______________________________________________
> gentoo-newbies mailing list
> [email protected]
> http://lists.gentoo.org/mailman/listinfo/gentoo-newbies
>
>
> _______________________________________________
> gentoo-newbies mailing list
> [email protected]
> http://lists.gentoo.org/mailman/listinfo/gentoo-newbies