Gentoo Archives: gentoo-user

From: james <wireless@×××××××××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] iptables wiki
Date: Wed, 05 Jul 2006 03:14:54
Message-Id: loom.20060705T015933-644@post.gmane.org
1 Hello,
2
3 I'm attempting to follow this wiki to build a test firewall running iptables:
4 http://gentoo-wiki.com/HOWTO_Iptables_for_newbies#QuickStart
5
6 Kernel is 'hardened' with netfilter et al activated.
7
8 It looks reasonable and is suppose to be up to date.
9
10 My nics are set up in /etc/conf.d/net
11 iface_eth0="192.168.2.20 broadcast 192.168.2.255 netmask 255.255.255.0"
12 iface_eth1="192.168.3.11 broadcast 192.168.3.255 netmask 255.255.255.0"
13 iface_eth2="<snipped> broadcast <snipped> netmask 255.255.255.252"
14 routes_eth2=( "default gw <snipped>" )
15
16 All work fine.
17
18 port forwarding is enabled:
19
20 Rulesets get saved to /var/lib/iptables/rules-save
21 As specificed in /etc/conf.d/iptables
22 and
23 /etc/init.d/iptables is the script that launces iptables
24 plus rc-update add iptables default
25
26 I think all of this is correct(correct me if I'm wrong).
27
28 When I go to /etc/init to write my rules into firewall.sh
29 as specified in the aforementioned wiki I automatically get
30 this shoved into the script:
31
32 #!/sbin/runscript
33 # Copyright 1999-2006 Gentoo Foundation
34 # Distributed under the terms of the GNU General Public License v2
35 # $Header: $
36 depend() {
37 }
38 start() {
39 }
40 stop() {
41 }
42 restart() {
43 }
44
45
46
47 curiously none of the example talk about this.
48
49 Is this the correct place to put my script(/etc/init.d/,
50 which is somewhat similar to the one suggested in the
51 wiki?
52
53
54 None of the examples I found googling discuss the details of where to put
55 the script, how to launch it and other such details. Any suggestion
56 are welcome. I have found lots of example scripts similar to my 3 nic
57 net/lan/dmz setup though.
58
59 Any suggestions are very welcome.
60
61 James
62
63
64
65
66 --
67 gentoo-user@g.o mailing list

Replies

Subject Author
Re: [gentoo-user] iptables wiki Daniel <danny@××××××××.com>