topic Re: Red Hat 7.2 in Operating System - Linux

Red Hat 7.2

manny_9 — Tue, 18 Nov 2003 20:18:55 GMT

question from Linux newbie.
We have server which performs two functions that we know of....email and internet gateway.

I don't know much about NAT.
What and Where would I look at, to find out out if this box is performing NAT??

Thanks In Advance
Fred

Re: Red Hat 7.2

K.C. Chan — Tue, 18 Nov 2003 20:23:43 GMT

Most likely it is using ipchains or iptables to NAT, I think it is the later; you can find out by doing iptables -L, this should list the all policy and rulesets. I would suggest you read on iptables, sorry at the moment I drawing blanks on url for iptables documents.

Re: Red Hat 7.2

Steven E. Protter — Tue, 18 Nov 2003 20:57:40 GMT

I'm uploading a iptables configuration file that does NAT among other things.

The IP addresses have been changed to protect the innocent.

SEP

Re: Red Hat 7.2

Ragu_1 — Tue, 18 Nov 2003 22:26:56 GMT

Redhat 7.2 comes with an older Linux kernel that does not support iptables. Maybe you should start out with reading this excellent tutorial on IPTables first, http://www.linuxsecurity.com/resource_files/firewalls/IPTables-Tutorial/iptables-tutorial.html before you deploy your firewall using NAT.

Re: Red Hat 7.2

Stuart Browne — Tue, 18 Nov 2003 22:58:57 GMT

Atually RH7.2 was the second in the series to support tables.

It uses ipchains by default, however, and thus you need to issue the following commands to make use of iptables:

service ipchains stop
rmmod ipchains
chkconfig --level 0123456 ipchains off
chkconfig --level 2345 iptables on
service iptables start

This will do most of the legwork for you.

After that , 'iptables -t nat' is your friend. DNAT, SNAT, REDIRECTS, or even MASQUERADE's.

Re: Red Hat 7.2

manny_9 — Wed, 19 Nov 2003 19:40:15 GMT

Thanks to everyone who responded! BIG HELP!!

I now have somewhat of a clue.
When i did iptables -L i found out that iptables is really doing NAT.
Is there anything else that would work in conjunction with iptables? What/where should i check to find out exactly what this box is doing. We are in the process of building a new one.

Re: Red Hat 7.2

manny_9 — Thu, 20 Nov 2003 06:44:14 GMT

Anyone???

Re: Red Hat 7.2

Alexander Chuzhoy — Thu, 20 Nov 2003 07:20:23 GMT

Hi. Running "netstat" with it various options will show on what ports your server is listening-what services are running.
Iptables is widely used for the following:
* build internet firewalls based on stateless and stateful packet filtering
* use NAT and masquerading for sharing internet access where you don't have enough addresses
*use NAT for implementing transparent proxies
* aid the tc+iproute2 system used to build sophisticated QoS routers
* do further packet manipulation (mangling) like altering the TOS field of the IP header

For more information:
www.iptables.org

Re: Red Hat 7.2

Alexander Chuzhoy — Thu, 20 Nov 2003 07:30:09 GMT

Forgot to mention:
service --status-all |grep running 2> /dev/zero
will output all running sevrices
Best regards

Re: Red Hat 7.2

Jerome Henry — Thu, 20 Nov 2003 08:12:40 GMT

Another valuable tool for nating and controling in/out transit is squid.
http://www.squid-cache.org

hth

J