LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 08-28-2009, 04:21 PM   #1
tazschic
LQ Newbie
 
Registered: Aug 2009
Posts: 1

Rep: Reputation: 0
Iptables command for allowing traffic across two subnets


Understanding that for any competent linux user this is likely an easy question.

Need to add a firewall rule to allow all traffic between two subnets:

Src=192.168.4.0/24, Dst=192.168.1.0/24 srcport=ANY, dstport=ANY ALLOW
Src=192.168.1.0/24, Dst=192.168.4.0/24 srcport=ANY, dstport=ANY ALLOW

I am wondering if someone would be so kind to provide the exact command line syntax to make this above happen.

Thanks in advance.

Tazschic

NOTE: 192.168.1.1 is on eth0 and 192.168.4.1 is on eth2

Last edited by tazschic; 08-28-2009 at 04:25 PM. Reason: more information
 
Old 08-29-2009, 02:52 AM   #2
fotoguy
Senior Member
 
Registered: Mar 2003
Location: Brisbane Queensland Australia
Distribution: KirraMail Live Email Server
Posts: 1,279

Rep: Reputation: 61
First of all, can you give us more information on what you are trying to do, a quick scenario will help us understand what you are trying to achieve.

What distro are you using? Are there any rules or scripts that you are currently using? without knowing this, you can run into all sorts of problems trying to trouble shoot, the more information you can give, the better we can help.

To help with you question, When you have 2 network cards you need to turn port-forwarding on in the kernel, most distro will have this turned off be default, try:
Quote:
echo "1" > /proc/sys/net/ipv4/ip_forward
Then you need to add some forwarding rules

Quote:
iptables -A FORWARD -i eth0 -o eth2 -s 192.168.1.0/24 -d 192.168.4.0/24 -j ACCEPT
iptables -A FORWARD -i eth2 -o eth0 -s 192.168.4.0/24 -d 192.168.1.0/24 -j ACCEPT
 
Old 08-30-2009, 08:54 PM   #3
chrism01
Guru
 
Registered: Aug 2004
Location: Sydney
Distribution: Centos 6.5, Centos 5.10
Posts: 16,269

Rep: Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028Reputation: 2028
You'll need to make that a permanent setting or it'll disappear at next boot.
Edit /etc/sysctl.conf

net.ip4.ip_forward = 1
 
  


Reply

Tags
iptables


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[HELP] redirect traffic to spesific port based on Traffic Content using iptables summersgone Linux - Server 2 06-22-2009 11:26 AM
iptables command to route all incoming traffic ger88005 Linux - Networking 2 02-11-2008 09:40 AM
Iptables - Allowing BitTorrent & aMule Traffic mistersnorfles Linux - Networking 2 08-20-2007 09:08 AM
allowing traffic in some ports igordonin Linux - Networking 10 12-11-2006 08:46 AM
iptables allowing all LAN traffic tebucky Linux - Security 1 11-04-2004 11:27 AM


All times are GMT -5. The time now is 03:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration