eth0 -> eth1

[swimm3r]

hello

I have 2 cards, eth0 and eth1... eth0 is used for internet and eth1 for intranet
I want to "give" access to internet to the card eth1. how can I do that?!

I tried to use "setup"-> firewall setting... I setelct Trust to eth0 and MASQUERADE to etho, but no good

please help me! thanks

[Brian1]

You want to have machines connected to eth1 to have internet access correct.

If that is correct things to check.
Post current iptables script.
Post output from ' ifconfig -a '
Post output from ' route -n '

Now of course I assume the eth0 works fine to the internet. If so when you setup the eth1 you need to set the IP and netmask. Do not set a gateway on that nic. Masquerade will handle that for you.

Brian

[bkarankar]

hey,
you have to reconfig ur eth1 like :
make eth0's ip as gatway
and Give Dns of ur internet
then restart/reload network service
u can also try
ifdown eth1
ifup eth1
good luck budy.
bkarankar

[bkarankar]

if need, then config proxy

[Zotter]

http://easyfwgen.morizot.net/gen/

And don't forget the '1' in /proc/sys/net/ipv4/ip_forward either.

It'd be handy go get DHCP and at least a caching DNS server going on that box too.

[swimm3r]

iptables -F
iptables -t nat -F
iptables -X

#to open 1111 udp and 2222 tcp I use...
iptables -A INPUT -p udp -m udp --dport 1111 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 2222 -j ACCEPT

iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -i eth0 -j DROP

iptables -A FORWARD -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

#to forward 1234 tcp from etho to 192.168.1.2 I used
iptables -t nat -A PREROUTING -d <internet_ip> -i eth0 -p tcp -m tcp --dport 1234 -j DNAT --to-destination 192.168.1.2

Now all it"s ok. Thanks all for the support

LL

[Brian1]

How did you setup eth1?
What settings did you set?
Post the contents of /etc/sysconfig/network-scripts/ifcfg-eth1

Brian

[swimm3r]

# Realtek Semiconductor Co., Ltd. RTL-8139/8139C/8139C+
DEVICE=eth1
HWADDR=00:40:xx:xx:xx:xx
ONBOOT=yes
DHCP_HOSTNAME=fedora
IPADDR=192.168.x.x
NETMASK=255.255.255.0
TYPE=Ethernet
USERCTL=no
IPV6INIT=no
PEERDNS=yes