Results 1 to 3 of 3

Thread: share internet connection to clint from server

Hybrid View

  1. #1
    Join Date
    Nov 2010
    Location
    Kerala
    Beans
    376
    Distro
    Ubuntu

    share internet connection to clint from server

    Thanks for the help from you all , now am back to the same issue internet connection sharing using NAT .I use the following command it work for me for an hours ..
    Code:
    sudo iptables -A FORWARD -o eth0 -i eth1 -s 192.168.0.0/24 -m conntrack --ctstate NEW -j ACCEPT sudo iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT sudo iptables -A POSTROUTING -t nat -j MASQUERADE
    Code:
    sudo iptables-save | sudo tee /etc/iptables.sav
    Edit /etc/rc.local and add the following lines before the "exit 0" line:
    Code:
    iptables-restore < /etc/iptables.sav
    Code:
    sudo sh -c "echo 1 > /proc/sys/net/ipv4/ip_forward"
    After restarting my server NAT is not working .client system can ping to my server through the server's eth1 ip but Internet is not accessible to the client pcs .I think its my fault but I cant rectify what is the issue ..please any give me your configuration ....and also I wish to implement the attached structure in my institution if it any wrong on there please suggest me to change .......

  2. #2
    Join Date
    Nov 2010
    Location
    Kerala
    Beans
    376
    Distro
    Ubuntu

    Re: share internet connection to clint from server

    structure wish to implement
    Attached Images Attached Images

  3. #3
    Join Date
    Nov 2010
    Location
    Kerala
    Beans
    376
    Distro
    Ubuntu

    Re: share internet connection to clint from server

    Hmmm am alone here ok



    Code:
    echo -e "\n\nLoading simple rc.firewall-iptables version $FWVER..\n" DEPMOD=/sbin/depmod MODPROBE=/sbin/modprobe  EXTIF="eth0" INTIF="eth1" #INTIF2="eth0" echo "   External Interface:  $EXTIF" echo "   Internal Interface:  $INTIF"  #====================================================================== #== No editing beyond this line is required for initial MASQ testing ==  echo -en "   loading modules: " echo "  - Verifying that all kernel modules are ok" $DEPMOD -a echo "----------------------------------------------------------------------" echo -en "ip_tables, " $MODPROBE ip_tables echo -en "nf_conntrack, "  $MODPROBE nf_conntrack echo -en "nf_conntrack_ftp, "  $MODPROBE nf_conntrack_ftp echo -en "nf_conntrack_irc, "  $MODPROBE nf_conntrack_irc echo -en "iptable_nat, " $MODPROBE iptable_nat echo -en "nf_nat_ftp, " $MODPROBE nf_nat_ftp echo "----------------------------------------------------------------------" echo -e "   Done loading modules.\n" echo "   Enabling forwarding.." echo "1" > /proc/sys/net/ipv4/ip_forward echo "   Enabling DynamicAddr.." echo "1" > /proc/sys/net/ipv4/ip_dynaddr  echo "   Clearing any existing rules and setting default policy.."  iptables-restore <<-EOF *nat -A POSTROUTING -o "$EXTIF" -j MASQUERADE COMMIT *filter :INPUT ACCEPT [0:0] :FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] -A FORWARD -i "$EXTIF" -o "$INTIF" -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT  -A FORWARD -i "$INTIF" -o "$EXTIF" -j ACCEPT -A FORWARD -j LOG COMMIT EOF  echo -e "\nrc.firewall-iptables v$FWVER done.\n"


    This script help to share the connection but after restart the server it not allow to share ,so I am force to run the script againg
    Code:
    sudo sh nat.sh
    I think last command for start this script at boot time is not work for me [CODE][If ping responds, make our new script bootable so we don't have to run the script every time we restart.

    • Code:
      sudo cp nat.sh /etc/init.d/ sudo ln -s /etc/init.d/nat.sh /etc/rc2.d/S95masquradescript

    As a final test, restart your computer and test to see if you still have the same functionality. If so then congratulations! If not then make sure you followed the above correctly so the script is bootable. /CODE]
    Last edited by Rakeshvijayan; July 20th, 2011 at 07:06 AM.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •