#7 hiding / masquerade for dynamic ip addresses

[Jörg Schütter]

Most users without a leased line get a new ip address
every time they
connect to the Internet. So it's up to the firewall
script to hide all
traffic which leaves the firewall in direction Internet
with the proper
ip address. Since iptables this has become a lot
easier. All we have to
know is which interface of the firewall is connected
with the Internet.

# masq everything leaving through ippp0
$iptables -t nat -A POSTROUTING -o ippp0 -j MASQUERADE