hi,

if i want to setup my RH9 as a router, then, where should i looking for? routing table?? $ route -n ??? or
iptables?? $ iptable -t nat ???

thanks..

to setup a router you dont need iptables, you can play with the routing table and turn on ipforwarding and add the iptables nat rule if your router will double as an internet gateway.

rather than type it all out again, i'll suggest doing a search on the forums for this very topic. you'll find a few good examples.

because you seem to want to use it as an internet gateway, make sure you pick something that does involve iptalbes because you'll want the security features too.

i am still blur.... can u pls explain in a more simple way?
anyway, i have been trying to setup a routing rules in my routing table... but, then, after i restart my networking services... the rules is changed... why? i am wondering.....

i did some studying on iptables too... there is a way for routing to a destination....in the PREROUTING chain.

ar..... i am too confused.... how??? what is the tool??? routing table or iptables -t nat ???

pls, give me more explaination.... what is the differences between routing table and iptables -t nat???
how can i make use to both of them??? thanks.... it is really urgent.... bye.....

i have a gateway system that is a redhat 8.0 box but all the same rules apply to you to

basicly the command follws as is

iptables -t nat -A POSTROUTING -o eth0( in my case) -j MASQUERADE

the -o flag is for interface out meaning the object that you connect to the internet with wether it be
ppp0
eth0
what ever

the you enter this command

echo 1 > /proc/sys/net/ipv4/ip_forward

that right there enables ip forwadding , now the only bad part of this is , you know have this gateway/router with a weak firewall installed so you might wanna beef up security by inserting some chains into iptables
me i have
iptables -A INPUT -p icmp --icmp-type echo-request -j DROP
thats a simple way to allow you to ping another computer but anytime someone pings you , it drops them like a bad habbit.
And another good program out there for your firewall , gateway would be portsentry. So simple to install , what it does when someone does a portscan/nmap it gives them bogus info and drops them from the routing tables in ipchains . So even if they wanted to they couldnt connect to you , but beware because your deny list gets kinda of big specially if you have broadband.