[Comm-en] Setting up internet sharing

[djbouley]

Okay that got the firewall's rules is going okay.  My other PCs on the 
network, though, cannot seem to gain access to the Internet.

I have them configured to use a static IP, with addresses of 192.168.0.(2, 3, 
4, etc.),  IP of network set to 192.168.0.1 (eth1 on main PC), Netmask of 
255.255.255.0, Broadcast address of 192.168.0.255, Gateway of 192.168.0.1 
(eth1 on main PC).

Using the ALT Linux control centre, eth0 and eth1 show to be up and running.  
eth1 shows of having an IP address of 192.168.0.1 (the control centre's share 
connection setup still doesn't work, though).

The control centre's Services tool show that iptables is 'running'.

I'll try to figure something out if I can, I just thought I'd let you know how 
it's going.  Thanks for all of your time and effort.

David.



> Argh, it's my fault -- underreconstructed local configuration.

> Here's the contents of /etc/sysconfig/iptables:

> Should be like this: (add one line)

> *filter
> :tcprules - [0:0]
> -A INPUT -j tcprules
> -A FORWARD -j tcprules
> -A tcprules -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
> -A tcprules -i ! eth1 -m state --state NEW -j ACCEPT
> -A tcprules -i eth1 -m state --state INVALID,NEW -j DROP
> -A tcprules -i eth1 -j REJECT --reject-with icmp-host-unreachable
> COMMIT
> *nat
> -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j MASQUERADE
> COMMIT

> The story: we've asked iptables to use a specific chain (which
> gets reused), but haven't created ("declared") it and no specific
> module was found to be used for it.

> Somewhat more elaborate config is attached, you can have some
> more interesting examples in its comments.


============================================
(o_
//\
\/_/  E-mail powered by Linux
============================================
======