🚀 go-pugleaf

On 14 Dec 1999 00:28:53 GMT, peter@petermc.demon.co.uk
<peter@petermc.demon.co.uk> wrote:

> > (Make sure you have a clear picture of what interface in your machine is
> > doing what, and what the input/forwarding/output chains *do*, as from e.g.
> > the Masquerading HOWTO. Then consider running gfcc :)
> 
> But do make sure you stay away from the ipchains HOWTO. It has to be the
> most impenetrable one in the whole bunch.

Fair enough. I was considering recommending such a beastie, but couldn't be
bothered digging it up :)

	Chain.
	Rule.
	Interface.
	Protocol.
	accept|deny|reject.
in roughly that order.

> The Masquerading HOWTO is much more easy to grasp, even if I still haven't
> quite gotten to grips with it myself yet. :-(

It's really really easy, once you realise that there are only two lines in it
that are relevant and only one of those is required to make it work (the other
is 'deny forwarding by default'). It might be helpful to think of it in terms
like "pick up packets from 'ere and magically fling 'em ower yonder", too :)

(Be grateful I don't write HOWTOs, at least not just yet ;)

~Tim
--
| Geek Code: GCS dpu s-:+ a-- C++++ UBLUAVHSC++++ P+++ L++ E--- W+++(--) N++
| w--- O- M-- V-- PS PGP++ t--- X+(-) b D+ G e++(*) h++(*) r--- y-
| The sun is melting over the hills,         | http://www.glutinous.custard.org
| All our roads are waiting / To be revealed | piglet@glutinous.custard.org