which iptables command to run firefox behind a linux router?

one of my PC is a linux router. its name is 'rato'. the ip adress of the router are :
192.168.3.4, 192.168.4.4, 192.168.5.4, 192.168.6.4, 192.168.6.4,192.168.9.4
on this router, 'route' give:
[root@rato etc]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.6.0     0.0.0.0         255.255.255.0   U     0      0        0 eth3
192.168.5.0     0.0.0.0         255.255.255.0   U     0      0        0 eth2
192.168.4.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.9.0     0.0.0.0         255.255.255.0   U     0      0        0 eth6
0.0.0.0         192.168.3.3     0.0.0.0         UG    0      0        0 eth0
on this router, 'iptables' give:
[root@rato etc]# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
[root@rato etc]#
on the router 'rato', I can run firefox and acces to internet thru adsl thru the net 192.168.3.0.
I would like to be able to access to internet thru firefox on any pc of the net 192.168.5.0
what are the iptables commands to be able to run firefox from any pc of the 192.168.5.0?
for instance, I want to run firefox on the 192.168.5.162 ? which iptable should I type on the router?


gdmoAsked:
Who is Participating?
 
mianniCommented:
You don't actually need to run iptables for you to browse the internet.
1. turn on ip_forwarding
2. set routes on your adsl router for subnets (192.168.4.0, 192.168.5.0, 192.168.6.0, 192.168.6.0,192.168.9.0) via 192.168.3.4

All your traffic will go through RATO as it now acts as a router.

If you wish to setup iptables fIrewall, then I suggest you have a good read of the link above.

For a quick fix you can check out this sample iptables file and modify as required:

http://www.liniac.upenn.edu/sysadmin/security/iptables.html
 
0
 
mianniCommented:
How do you actually exit your network to reach the internet ?
As all of your interfaces are (RFC1918), there is no internet connection.

All the same check the config file:

cd /etc/sysconfig/iptables
0
 
mianniCommented:
Actually I just noticed, your default gateway is 192.168.3.3 !!!
Then you will probably need to check that ip_forwarding is turned on and also check the file I mentioned above.
Another thing will be routing back to your rato firewall, either on the router 192.168.3.3 you will need to route the other subnets back or you will need to configure masquerading.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
gdmoAuthor Commented:
Yes, the gateway 192.168.3.3 is a adsl modem-router. But, for some reasons, I want to use un linux router and not a adsl modem-router. The reasons are that I want to have separate subnets.
As far as I know, to configure masquerading, I will need to configure iptables on the 'rato' router. As I have not yet used iptables, I have not yet well understood iptables. I would like than somebody say which command iptables are to be used.
0
 
mianniCommented:
check out this link:
http://www.siliconvalleyccie.com/linux-hn/iptables-intro.htm

you will need to work out exactly what you want to do with the traffic and then apply it into a file.
If you want further information explain in detail what you want to achieve eg: source destination traffic flows, who sees who, etc..
0
 
gdmoAuthor Commented:
I know exactly the result that I expect to obtain. But, unfortunately, I do not know the iptables commands I must write to obtain what I want.  I just want that a pc under linux whom ip adress is 192.168.5.162 could acces web by firefox.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.