HellO...
any idea about Internet Connection Sharing in linux..




Its just few clicks when you do it from windows to linux
what about from linux to other OSs

check out iptablesrocks.org there scripts there for a variety of situations. Its likely that you'll just need the one for Cable/DSL internet access

Yeah, its a few clicks in windows, but its also extrememly insecure. The best quote I can give is this

"Monkeys can push buttons and click a mouse, but if you want to have a secure and stable OS, you need to learn how it works."
--Some dude from a defunct linux site.

While the person who said it was sort of a jerk, it kind of hold true. Windows is painlessly easy, and therefore painfully insecure.

try this script on /etc/rc.d/rc.local

------------------------------------------------------------------
echo 1 > /proc/sys/net/ipv4/ip_forward

/sbin/iptables -A POSTROUTING -t nat -s x.x.x.x/y.y.y.y -o eth3 -j SNAT --to-source z.z.z.z

-----------------------------------------------------------------


x.x.x.x/y.y.y.y represent your local ipaddress and netmask u want user user to assign while z.z.z.z represent the outgoing interface ip address you have got from ur internet service provider.

hope this will work for you. have fun ;-)

thank you for your great advices

should any one to pass connection using dail-up NOT DSL use the firewall ...???
and also i don't care about security too much right here i'm not running any servers (just i want to put windows behind linux)

Hi,

firewalling is ever a good idea, even on a low speed connexion :
even though you may not worry much about your datas, someone can still use your machine so as to do bad things on Internet, such things can happen to anybody, consequences become more and more important (see www.securityfocus.org for some examples).

sixth_sense gave you the comands to share Internet (no firewalling in what he wrote). You can add these lines in his script :

# Default behaviour : drop all
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

# Accept outgoing traffic any protocol, any destination
iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state NEW,ESTABLISHED -j ACCEPT

# Accept all traffic coming from LAN to INTERNET
iptables -A FORWARD -i $INTERNET_IFACE -m state --state ESTABLISHED -j ACCEPT
iptables -A FORWARD -o $INTERNET_IFACE -m state --state NEW,ESTABLISHED -j ACCEPT

It's far from being the more paranoid config, but it's a begining...