Traffic Forwarder using IPTables: Difference between revisions

From Leo's Notes
This page was last edited on 29 March 2015, at 06:06.
No edit summary
No edit summary
Line 17: Line 17:


Add additional tweaks as required to the firewall. You will probably want to run <code>iptables-save</code> to make the changes persistent.
Add additional tweaks as required to the firewall. You will probably want to run <code>iptables-save</code> to make the changes persistent.


[[Category:Linux]]
[[Category:Linux]]
[[Category:Networking]]
{{Navbox Linux}}

Revision as of 06:06, 29 March 2015

To make a linux box act as the gateway for a NAT (in this example, 10.10.2.0/24) using IPTables, run:

# Enables forwarding. Same effect with 'sysctl net.ipv4.ip_forward=1'
echo 1 > /proc/sys/net/ipv4/ip_forward

# Define $INSIDE as the interface going into the NAT
# Define $OUTSIDE as the interface going to the internet

# Route traffic destined to 10.10.2.0/24 to $INSIDE
route add -net 10.10.2.0/24 dev $INSIDE

# Masquerade traffic going to $OUTSIDE
iptables -t nat -A POSTROUTING -o $OUTSIDE -j MASQUERADE

# Forward traffic coming from $INSIDE
iptables -A FORWARD -i $INSIDE -j ACCEPT

Add additional tweaks as required to the firewall. You will probably want to run iptables-save to make the changes persistent.