Jack <[EMAIL PROTECTED]> writes: > where could I put these commands, to be run at the boot time: > > ipchain -A forward -s 192.168.0.0/24 -j MASQ
If you're using /etc/network/interfaces, you might have something like: iface eth0 inet static address 192.168.69.1 netmask 255.255.255.0 gateway 192.168.69.254 up /etc/network/firewall And you'd put your ipchains commands in the firewall script. Call the script whatever you'd like. > echo 1 > /proc/sys/net/ipv4/ip_forward Set `ip_forward=yes' in /etc/network/options. These files get used by ifup and by /etc/init.d/networking. /etc/init.d/network is deprecated. I need to update http://www.newt.com/firewall/ with this info. -- Bill Wohler <[EMAIL PROTECTED]> http://www.newt.com/wohler/ GnuPG ID:610BD9AD Maintainer of comp.mail.mh FAQ and mh-e. Vote Libertarian! If you're passed on the right, you're in the wrong lane.