Damn it... the SnatGUI is broken as per its new version, and can't be used on the latest version of IPCOP. I got these instructions and modified it as necessary but it's still not working!
===
* The first IP address on the firewall is x.x.x.226
* The second IP address on the firewall is x.x.x.227 and is the IP address configured with our ISP to do reverse DNS to our mail server.
* The mail server has an internal IP address of 192.168.x.254
First, I created a function in /etc/rc.d/rc.firewall.local called custom_nat
custom_nat() {
# Accept PING traffic (we needed this to allow our external site monitors to ping the mail server)
/sbin/iptables -A CUSTOMFORWARD -p icmp -d 192.168.x.254 -j ACCEPT
# Do source natting for the mail server. Change 192.168.x.254 to x.x.x.227
/sbin/iptables -t nat -A CUSTOMPOSTROUTING -s 192.168.x.254 -j SNAT —to-source x.x.x.227
# Do source natting for the rest of the network.
/sbin/iptables -t nat -A CUSTOMPOSTROUTING -s 192.168.x.0/24 -j SNAT —to-source x.x.x.226
}
Second, I added this call to start case in rc.firewall.local
case “$1” in
start)
## add your ‘start’ rules here
#Added for zerina start - BEGIN
/usr/local/bin/openvpnctrl —create-chains-and-rules
#Added for zerina start - END
custom_nat
;;
===
Now...what?
22 July 2008
Subscribe to:
Post Comments (Atom)
2 comments:
Congratulations for this wonderful reading article. I found it very informative and interesting too, I think you are a brilliant writer. I have bookmarked your blog and will return in the future. I want to encourage you to continue that marvelous work, have a great daytime!I am a china tour lover,You can learn more: China travel packages | Asia tour packages | China city tour packages
2015-07-13 zhengjx
ray ban sunglasses
cheap soccer jerseys
rolex watches for sale
tn pas cher
ralph lauren femme
tory burch outlet
ed hardy clothing outlet
coach outlet online
ralph lauren sale
pandora jewelry sale
sac louis vuitton
louboutin femme
coach outlet store online
pandora charms sale clearance
jorda femme pas cher
ralph lauren uk sale
longchamp pliage
mcm backpack
hollister kids clothing
ray ban glasses
nike pas cher
tory burch shoes
kate spade outlet
kate spade
coach outlet store online
replica watches rolex
soccer shoes for sale
oakley sunglasses cheap
ed hardy outlet
kate spade outlet
polo outlet
louis vuitton sito ufficiale
michael kors watches
cheap snabacks
jordan shoes uk
longchamp le pliage
jordan femme
polo ralph lauren uk
cheap oakley sunglasses
michael kors outlet
Post a Comment
Feel free to comment here... ^^b Thank you for your time.