How to setup a router forwarding ALL traffic and providing NAT services

Hi all,

I have searched the archives but could really find the answer I was
looking for.

I have a Sparcstation 5 running Aurora Linux (Red Hat based). It has
110Mhz Sparc Processor and 64MB RAM and is running 2.4 kernel.

I would like to configure this as a router forwarding *ALL* incoming
traffic to my internal LAN (a Windows box) and allowing all outbound
traffic. I would also like to monitor and capture *ALL* traffic
passing through it. It will need to provide NAT services too.

I have read the IP-Masquerading howto and had a look at a few other
howto's but there seem to be an awful lot of ways to do NAT and
forward traffic.

2 questions:
1. Do you think the box is up to it (specifications wise) or am I
wasting my time? (It's currently acting as a Web/DNS and FTP server
for mainly my use)
2. How would it be best to accomplish this in the easiest way
possible. (also with as little load as possible on my Sparcstation).

Thanks

David

David wrote:
> Hi all,
>
> I have searched the archives but could really find the answer I was
> looking for.
>
> I have a Sparcstation 5 running Aurora Linux (Red Hat based). It has
> 110Mhz Sparc Processor and 64MB RAM and is running 2.4 kernel.
>
> I would like to configure this as a router forwarding *ALL* incoming
> traffic to my internal LAN (a Windows box) and allowing all outbound
> traffic. I would also like to monitor and capture *ALL* traffic
> passing through it. It will need to provide NAT services too.
>
> I have read the IP-Masquerading howto and had a look at a few other
> howto's but there seem to be an awful lot of ways to do NAT and
> forward traffic.
>
> 2 questions:
> 1. Do you think the box is up to it (specifications wise) or am I
> wasting my time? (It's currently acting as a Web/DNS and FTP server
> for mainly my use)
> 2. How would it be best to accomplish this in the easiest way
> possible. (also with as little load as possible on my Sparcstation).
>
> Thanks
>
> David


Apologies for the double post, my news server has been having trouble ...

David <(E-Mail Removed)> wrote:
> 2 questions:
> 1. Do you think the box is up to it (specifications wise) or am I
> wasting my time? (It's currently acting as a Web/DNS and FTP server
> for mainly my use)
> 2. How would it be best to accomplish this in the easiest way
> possible. (also with as little load as possible on my Sparcstation).

I don't know why but the NAT info on the 'net was really cryptic when I
first tried going through it, probably like you're doing now. You want to
set up iptables like many of the howtos say ... just get it running first.
Then, the iptables command you want is:

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE

....where 192.168.0.0/24 is your intranet (internal) IP range that you want
NAT'ed, and eth0 is your internet (external) ethernet interface.

--
eth'nT
http://www.hydrous.net
aim: courtarro