SlimJim wrote:
And please do not refer me to that
confusing Masquereading FAQ on the net!
Actually, that's what I'm gonna do.
I'm also running RH8 (well, 7.3 on the gateway box, but in this case it's no different).
I'm using the rc.firewall script from the
IP-masquerade-HOWTO, which I start by calling it with a line in /etc/rc.local (remember to make rc.firewall executable...). Maybe you don't even have to read the HOWTO, the script is well commented where you'll have to edit it (your interface names, static IP (if any), et c.).
For this to work, you need to disable the iptables service that RH wants to run, because that will reset the rules set in your script (you can use the nice graphical "serviceconf" to disable this service).
You're supposed to be able to run "service iptables save" as root when you've run the script, and the ruleset set by the rc.firewall script is supposed to be saved (in /etc/sysconfig/iptables IIRC) for the "iptables" service to use, but I've never gotten that to work.
So, disable the iptables service and run the /etc/rc.d/rc.firewall script at boot from /etc/rc.local. Works for me.
