simple? linux questions

[Possessed Freak]

I have successfully installed linux on my ICS machine, and is currently doing a good job at all the things ICS did in win2k.

my question is this:

How in the hell do you forward ports to an internal address, specifically a set of ports includiong a 100 port block. More specifically, how do I forward data from ports 6073, 47624, 2300-2400 from eth0 to eth1? Better yet, how in the hell do I just forward al packets, screw security.

 

[Possessed Freak]

oh and this is for a 2.4 kernal so none of that older 2.2 CRAP answers that I have been getting for the past 8 hrs, I don't need that, it does not work

ipmasqadm is not something this thing has, so that won't help either.

and yes if you can tell, I am getting very very frustrated at linux

 

[Shuxclams]

2.4 is all about IPTABLES... http://www.boingworld.com/workshops/linux/iptables-tutorial/#3.2.2

http://www.linuxnewbie.org/nhf/intel/security/iptables_basics.html


That should cover it.






SHUX

 

[Possessed Freak]

looking at that, it seems *seems* easy, with the: iptables -P FORWARD ACCEPT command, but how do I make a chain to forward those ports, including the grouping of 100 ports?

 

[Jay]

/me faints.

Can that be PF using Linux??? Mr. Bill Gates Jr. is using Linux???

 

[Possessed Freak]

no no, I am not using linux, it is ABusing me!

just sitting on my ICS box doing what it is doing, what it is doing is not what I want it to be doing, and to make it do what I want it to do is hard.

 

[Possessed Freak]

this really can't be that hard, all I want is every packet forwarded from eth0 to eth1 and from eth1 to eth0, is that bad? My current test is to see if I can DCC send with IRC from my internal machine. If I can't, it ain't solved.

And no, running some sort of preconfigured thing just for IRC will NOT solve the problem, I want all ports allowed...

 

[bphantom]

PF, I haven't played with the forwarding feature of iptables, but I'm guessing it's something along the lines of:

iptables -A FORWARD -i eth0 -p TCP --dport 2300:2400 -j ACCEPT

I looked at this IPTables script to give me the above idea. Sorry I couldn't be of more help, but I'm still a newbie to iptables.

Brad..

 

[efun]

PF two questions, first, did you get this working yet? and second what linux distro/version are you using?

You are aware that the linux2.4 netfilter supports the older syntax for 2.2ipchains right? (Hint it is a configure option for the kernel.)

 

[Eponymous]

So you want everything coming in eth0 to go out eth1?

Hmm, that sounds like either a router or a bridge.

Are you doing Masquerading? Is this a firewall?

Routing is easy. What kind of choice of IP numbers do you have?

How many machines do you want to have behind this machine?

The fun part is coming up with the subnet mask.