diff --git a/LDP/howto/docbook/BTI-PPP.sgml b/LDP/howto/docbook/BTI-PPP.sgml index 3c850642..ba976f23 100644 --- a/LDP/howto/docbook/BTI-PPP.sgml +++ b/LDP/howto/docbook/BTI-PPP.sgml @@ -21,9 +21,17 @@ Converted the mini-HOWTO from HTML to Docbook 3.1 (SGML). - 2001-11-17 + 2001-11-21 + + v0.26 + 2001-11-21 + mww + + Added a point about the Kernel HOWTO. + + v0.25 2001-11-17 @@ -436,6 +444,10 @@ heavyweight task ahead of you, but hey, if I could do it so can you! This is what you'll need to get it working: + You must have the kernel source installed and + know the procedure for installing and compiling a new kernel. + If this is a problem then read the Kernel HOWTO. + You must be running one of the following Kernels: 2.3.39, 2.4.0-test4, 2.4.1-pre7, 2.4.7, 2.4.8-pre5. This is because the PPPoATM patch for the kernel exists patched @@ -687,6 +699,7 @@ modularised, if it isnt then no big deal, either ignore the modprobe iptable_nat iptables -t nat -F POSTROUTING iptables -t nat -A POSTROUTING -o ppp0 -s 10.0.0.0/16 -j MASQUERADE +echo 1 > /proc/sys/net/ipv4/ip_forward Change the and/or the for your relevant network settings and diff --git a/LDP/howto/docbook/IPTables.sgml b/LDP/howto/docbook/IPTables.sgml new file mode 100644 index 00000000..84e4246a --- /dev/null +++ b/LDP/howto/docbook/IPTables.sgml @@ -0,0 +1,122 @@ + + +
+ + + IPTables HOWTO + + + Matt + Wright + + Matt Wright Consulting +
+ matt@consultmatt.co.uk +
+ + + + 2001-11-21 + + + + v0.1 + 2001-11-21 + mww + + Initial writing began. + + + + + + + This document describes the main functions of the Netfilter Packet + filter (IPTables) included in the 2.4.x series kernels. + + + + + + +Introduction + +I felt the need to write this HOWTO because of, what I thought, is the poor +level of documentation of implementing Packet Filtering firewalls using the 2.4.x Netfilter packet filter. The HOWTO covers using native IPTables commands (ie. not using the ipchains.o) to implement a packet-filter based firewall and the various supported types of NAT. + + + +Copyright and License + +This document is Copyright 2001 by Matt Wright. Permission is granted +to copy, distribute and/or modify this document under the terms of +the GNU Free Documentation License, Version 1.1 or any later version +published by the Free Software Foundation; with no Invariant +Sections, with no Front-Cover Texts, and with no Back-Cover Texts. A +copy of the license is available at +http://www.gnu.org/copyleft/fdl.html + + +Send feedback to +matt@consultmatt.co.uk. + + + + + +About the author + + My name is Matt Wright. I'm 16 year-old student in Blackburn, +Lancashire. I'm a freelance Linux consultant. I am the proud owner of +a Duron 950Mhz (all I could easily afford) with 256MB SDRAM, Voodoo 4 +Video Card, ATI All-in-Wonder Pro Video Card. I also have a 266Mhz Cyrix +that runs my USB ADSL connection, of which if you are reading this from +http://www.consultmatt.co.uk +you will be using. + + +You can find me at www.consultmatt.co.uk. Or at matt@consultmatt.co.uk. + + + + +Acknowledgements +TODO: Insert greetz here + + + + +What is IPTables +IPtables (known as Netfilter) was written by Paul Russell and the other +members of the Netfiler Project +Team. It was meant as a replacement for IPChains that was implemented +in the 2.2.x series kernels. It offers true 1:1 NAT capabilities, Packet +filtering and connection tracking. + +One major upshot of this is that due to the implementation of connection +tracking you can allow incoming connections by whether or not they relate to +an established connection. There is still some need for helper modules for +some conenction types. (FTP and IRC at the moment) + + + +Requirements +You only need a couple of things to get IPTables going, these include: + + + A 2.4.x series kernel with the Netfilter modules compiled. + (I will deal with the Netfilter code as modules but feel free to compile + them in and ignore the module information.) + The IPTables source code, get it from The Netfilter Project + + This HOWTO does not + cover compiling and/or installing IPTables. Usually this is pre-installed + with a 2.4.x distro and if not then please consult the Netfilter website + for more information. + + + + + +
\ No newline at end of file