Re: [Devil-linux-develop] Firewall script for 2 NIC's & NAT.

[Heiko Z. <he...@zu...>]

Bruce Smith wrote:
>>>I added a simple iptables script that supports 2 NIC's w/masquerading.
>>>Please take a look, and comment:
>>>
>>>http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/devil-linux/build/config/
>>>etc/init.d/firewall.rules.2nic?rev=HEAD
>>
>>I wouldn't fix the interface to interna=eth1 and external=eth0 .
>>Let the user choose it.
> 
> 
> I'm trying to come up with script(s) that I can copy to firewall.rules
> in my new setup script.  I need to default them to something.  I'm happy
> to switch them around if you like that better.
> 
> Also, in my experience, the numbering of ethernet interfaces is very
> arbitrary.  Even if the cards use two different drivers, I don't know
> how to tell which is which without examining the MAC addresses or trying
> them.  The output of "ifconfig" doesn't say which driver it's using.  
> 
> Asking a newbie if they want eth0 or eth1 connected to the internet
> isn't going to mean anything to them, unless I can tell them which card
> is which.
> 
> So, my instructions would be to plug one NIC into your cable/DSL modem,
> and the other into your internal LAN.  If it doesn't work, switch the
> cables, reboot DL & modem, and try again.
> 
> I'd appreciate advice, if there is a better way.

You're right, do it if nobody comes up with a better idea.

Heiko