Forum

Hello Hugo,

I like using Firetable. I use it on some Servers.

Now I want to configure a gateway with tun0 for at home.

But I'm not sure, how to build up this forward rules elegant in Firetable:

iptables -A FORWARD -o tun0 -i eth0 -s 192.168.2.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -o tun0 -s 192.168.2.0/24 -m conntrack --ctstate NEW -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

What would be the correct syntax in Firetable? I'm not sure to understand the snat and forward syntax in firetable correctly

Could you give me an example?
Thank you very much and many thanks for all what you do for open source

Operating System: Debian Testing

Masquerading is not supported by Firetable. Masquerading is for connections with a short life span, like dial-up connections. Do you really need that?

It is for a tun (vpn) with dynamic allocated IP's. So it is like a dial-up connection. Correct?

Yes. But you can still try if the snat/forward option also work.

Thank you Hugo
this is working for me:

# Forward
#
forward ip from 192.168.2.0/24
snat ip from 192.168.2.0/24

And in firetable.conf
enable_nat = yes

Firetable is pretty cool and easy for use