[NTLUG:Discuss] iptables / router problem

[Alton R. Pouncey, II]

test - please ignore.

On Wed, 2003-04-02 at 01:20, Greg Edwards wrote:
> kbrannen at gte.net wrote:
> > Anyway, I can see that I need to read more about iptables to do more fun 
> > things.  But one line above has me wondering after reading the man page, 
> > I'm wondering about the line:
> > 
> > iptables --table nat --append POSTROUTING --out-interface eth0 -j 
> > MASQUERADE
> > 
> > Since I have a static IP from my ISP, the man page seems to indicate 
> > that I should use "SNAT" not "MASQUERADE".  Yes or No?
> > 
> > Thanks for the help guys!  The TrinityOS site seems to have some useful 
> > stuff too.
> > 
> > Kevin
> > 
> 
> I assume that since your internet IP is a direct connect you'll be 
> looking at firewall as well.  I've come to be real partial to shorewall 
> which has a good discussion about SNAT vs MASQ you might want to peruse. 
>   They just released 1.4 so I'll have to get to looking at that when 
> I've got some time.
> 
> www.shorewall.net
-- 
Alton R. Pouncey, II
SCSA, SCNA, CCNA, CIW Professional
http://www.trainers-r-us.com