LinuxSA Mailing list archives

  From: David Rowlands <davidr@empower.com.au>
  To  : linuxsa@linuxsa.org.au <linuxsa@linuxsa.org.au>
  Date: Thu, 31 May 2001 10:38:50 +0930

ip masquerading

I've got ip masquerading set up for my entire subnet as follows:

ipchains -A forward -j MASQ -s 192.168.10.0/24

However, I now want to have masquerading running for all IP's in the subnet
but 3. Using DENY won't do, since those machines still need access to the
box doing masquerading, I just don't want their packets masqueraded. I can't
work out a way to use the ! (invert) work either for 3 addresses.

Does anyone know of a neater solution than having a seperate ipchains
command for each ip address?



--
David Rowlands
Technical Consultant
Citrix Certified Administrator
Empower International Pty Ltd
Phone +61-8-83326988
Fax +61-8-83326998

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject