RE: Anyone Can Help me with Iptables Working Script?

#REM  ******    BLOCK KAZA         *******

#ipchains -A output -d 216.74.0.0/255.255.0.0 -j REJECT

#ipchains -A output -d 66.33.80.199/255.255.255.255 -j REJECT


#REM  ******  BLOCK DOWNLOAD.COM   *******

#ipchains -A output -d 206.16.0.1/255.255.255.0 -j REJECT

#ipchains -A output -p tcp -d 0.0.0.0/0.0.0.0 1863 -j REJECT

#ipchains -A output -d 207.46.110.0/255.255.255.0 -j REJECT

#ipchains -A output -d 202.69.33.16/255.255.255.255 -j REJECT

#ipchains -A output -d 202.69.36.37/255.255.255.255 -j REJECT

ipchains -A forward -s 192.168.0.4/255.255.255.255 -d 0/0 -j MASQ

ipchains -A forward -s 206.73.1.3/255.255.255.255 -d 0/0 -j MASQ

ipchains -A forward -s 192.168.0.14/255.255.255.255 -d 0/0 -j MASQ

ipchains -A forward -s 192.168.0.7/255.255.255.255 -d 0/0 -j MASQ

ipchains -A forward -s 192.168.0.13/255.255.255.255 -d 0/0 -j MASQ

Thanks.
Regards,
 
Mohammad Waqas
Network Administrator
________________________________
Gerrys Information Technology (Pvt.) Ltd.
Phone +9221 111-123-321 
Fax: +9221-5687975
Mobile +92-300-9207959
Email: [email protected]
________________________________
www.gerrys.net
www.skyfast.net
www.opensky.com.pk
www.gerryslive.com

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of T.P.Chan
Sent: Friday, July 18, 2003 9:15 AM
To: [email protected]
Subject: Anyone Can Help me with Iptables Working Script?

Hi,

Currently, I'm switching from using dial up to ADSL. Therefore, I would
like
to setup a firewall using running on RedHat 9.0 and iptables-1.2.7a-2. I
had
read a lot of documentation on iptables, however I still stuck on come
out
with a full set of rules to serve my intended purpose.

My ADSL provider assign 5 fix IP (219.x.x.x) for me. I had 3 server (1
Mail
and 2 web server) stay in DMZ. In my local LAN, I had 5 pc using private
ip
(192.168.0.x/24). My iptables box would had 3 network card
(eth0-219.x.x.x,
eth1-10.1.1.x/24, and eth2-192.168.0.x/24).

>From my understanding, (forgive me if I'm wrong, I'm newbie), I would
need
to do NAT from my public IP to my servers in my DMZ. Can someone, show
me
how the rules would look like? Maybe some working rules with the
scenario
describe above would be appreciate.

Thank you.

Regards,

Emanduel Chan Tain Por



_______________________________________________
Redhat-secure-server mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-secure-server