Next Previous Contents

Firewall+Masquerading+Diald+Dynamic IP-HOWTO

Sandro Poppi, <spoppi@gmx.de>

v0.11, June 14, 1999

This document describes how to set up firewalling including masquerading using diald and dynamic assigned IP addresses. The first part describes the way in general, the second part makes use of a special designed rc.firewall script. An HTML version of this HOWTO can be found at http://www.lug-burghausen.org/projects/firewall/firewall-masq-diald.html.

1. Preamble

1.1 Feedback
1.2 Disclaimer
1.3 Credits
1.4 Copyright
1.5 Required knowledge

2. Introduction

2.1 Firewall Types
2.2 Prerequisits for Firewalling

Appendix

3. The Shell Scripts

3.1 Required Networking Information
3.2 /etc/rc.d/rc.firewall and /etc/rc.d/rc.firewall.ipchains
3.3 /etc/rc.firewall.diald.add and /etc/rc.firewall.ipchains.diald.add
3.4 /etc/rc.firewall.diald.del and /etc/rc.firewall.ipchains.diald.del
3.5 /etc/rc.d/rc.firewall.var and /etc/rc.d/rc.firewall.var.ipchains
3.6 /usr/local/bin/fwlist and /usr/local/bin/fwlist.ipchains
3.7 /usr/local/bin/countRules.pl

4. Installation and Configuration

4.1 Installing the Scripts
4.2 Configuring /etc/rc.d/rc.firewall.var
4.3 Configuring /etc/rc.d/rc.local
4.4 Configuring /etc/diald.conf
4.5 Hints on using DIALD in various environments
4.6 Differences for static IP setup
4.7 Differences for leased line setup
4.8 Special Considerations for various Services
4.9 What to do with poor Performance

5. A Configuration Example

6. TODO

Next Previous Contents