Solved

iptables for dialup server

Posted on 2004-05-02
2
267 Views
Last Modified: 2010-05-18
HI.
Ok. I have RH9 running as my DNS server. I want to have a dialup connection over ppp0 for internet mostly.
I can already establish the connection and when turning iptables off on the server.
What rules/ports do I need to add/open for this to work.
I would like to treat my ppp0 users as not totally safe-not outside but not inside either. Is there a way to do this??
thanks.
0
Comment
Question by:kephillips
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Accepted Solution

by:
Alf666 earned 500 total points
ID: 10973860
Just build your rules based on interfaces, and not ip addresses.
There's a special feature in netfilter (iptables) that allow you to use a '+' sign as a wildcard.

So, in your case, you would build rules for a pseudo interface named "ppp+". This will match all pppn interfaces as they appear.

0
 

Author Comment

by:kephillips
ID: 10999703
OK. here's the basics:
$INSIDE=eth0
$OUTSIDE=eth1
I would basically like to use this one line to abilitate my ppp+ the same way as I have for eth0.
How can I do this. I made a line just like this for ppp+ but when I run it, it cuts off my internal network. How can I run them at the same time. (eth0 and ppp+ as trusted)
iptables -A INPUT -i $INSIDE -d 192.168.0.1 -j ACCEPT

Thanks.
0

Featured Post

Enroll in June's Course of the Month

June’s Course of the Month is now available! Experts Exchange’s Premium Members, Team Accounts, and Qualified Experts have access to a complimentary course each month as part of their membership—an extra way to sharpen your skills and increase training.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video, viewers are given an introduction to using the Windows 10 Snipping Tool, how to quickly locate it when it's needed and also how make it always available with a single click of a mouse button, by pinning it to the Desktop Task Bar. Int…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question