Re: FC3 problem with ip_forward / masquerade : no more DNS resolution

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Am Fr, den 12.11.2004 schrieb Pierre-Yves Berger um 17:40:

> So, I added a rule in iptables that says
> 
> -A RH-Firewall-1-INPUT -i eth1 -j ACCEPT
> 
> at the beginning of the RH-Firewall-1-INPUT chain and I have again 
> access to the world :-)
> 
> Is there a better way to do this ?
> 
> I may add that this is my home network with 2 Macs and a Linux system 
> and users are not
> a security risk, at least not deliberately.
> 
> Pierre-Yves

I would say this rule is ok for your environment. Of course your could
be more restrictive if you feel you need to protected the NATed clients.
Though you are not running a system from Seattle :)

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.8-1.521smp 
Serendipity 20:05:34 up 23 days, 17:45, load average: 0.18, 0.31, 0.28 

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux