Thursday, May 11, 2017

IP Masquerade on Linux

How To Masquerade On Linux (Internet Connection Sharing) 

 

It's very simple to masquerade (internet connection sharing in Windows language ) on Linux with a few lines of iptables and ip_forward commands.

 1. First of all you have to flush and delete existing firewall rules.

So flush rules by typing in terminal:

iptables -F
iptables -t nat -F
iptables -t mangle -F

2. Now delete these chains:

iptables -X
iptables -t nat -X
iptables -t mangle -X

3. Now it's time to save the iptables rules so type:

service iptables save
service iptables restart

4. Now all rules and chains have been cleared!

Check it in /etc/sysconfig/iptables which has all default rules set to accept.

Now open /etc/rc.d/rc.local and insert the line:

echo "1" > /proc/sys/net/ipv4/ip_forward

And then save and close the file.

5. Now asuming that your internet interface is eth0, type:

iptables -t nat -A POSTROUTING -o eth0 or enp2s0 -j MASQUERADE
service iptables save
service iptables restart

Note: check if iptables is set to start during boot up.

Or check the status of your iptables service:

chkconfig –list iptables

 

No comments:

Post a Comment

Linux Tables: Block All Incoming Traffic But Allow SSH

  This is very common scenario. You want to permit access to a remote machine only by SSH. You would like to block all incoming traffic to y...