Traffic Forwarder using IPTables: Difference between revisions
From Leo's Notes
This page was last edited on 1 September 2019, at 06:21.
m Text replacement - "{{Navbox Linux}}{{Navbox Linux}}" to "{{Navbox Linux}}" |
m Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux" |
||
| Line 19: | Line 19: | ||
[[Category:Linux]] | {{Navbox Linux}}[[Category:Linux]] | ||
[[Category:Networking]] | [[Category:Networking]] | ||
Revision as of 06:21, 1 September 2019
To make a linux box act as the gateway for a NAT (in this example, 10.10.2.0/24) using IPTables, run:
# Enables forwarding. Same effect with 'sysctl net.ipv4.ip_forward=1' echo 1 > /proc/sys/net/ipv4/ip_forward # Define $INSIDE as the interface going into the NAT # Define $OUTSIDE as the interface going to the internet # Route traffic destined to 10.10.2.0/24 to $INSIDE route add -net 10.10.2.0/24 dev $INSIDE # Masquerade traffic going to $OUTSIDE iptables -t nat -A POSTROUTING -o $OUTSIDE -j MASQUERADE # Forward traffic coming from $INSIDE iptables -A FORWARD -i $INSIDE -j ACCEPT
Add additional tweaks as required to the firewall. You will probably want to run iptables-save to make the changes persistent.