PPPOE and IPTABLES

[felixo]

Hello all, I followed this howto for an small office router:

http://www.gentoo.org/doc/en/home-router-howto.xml

I followed most the directions except I used rp-pppoe instead of net.ppp0

Everything went well, but I have a few problems:

First Iptables was not working at all. I had to flush all the rules and tables and do this command to route the connection to all the computers:

iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

I am aware that this is not blocking any ports, so I would like some advice from you guys as to what rules I should be setting and how I should be setting them. I figured the rules in the router howto are good, but I should just change all references in iptables of eth1 to ppp0?



Also, for some reason ntpd wants to start before the internet connection is made, how can I alter this at boottime?


Thanks for your help!

[srlinuxx]

Here's for your ntpd problem. Make sure your /etc/init.d/ntpd has something to this effect in there.

depend() {
need net
use dns logger
}

and here's for your iptables thing. It's a pretty good little ole script, I used it for a while. Edit it for your specifics.

And yeah, I had to use ppp0 for the internet interface, also on adsl using rp-ppoe
_________________
--You talk the talk, but do you waddle the waddle?
-Gentoo Monthly Screenshots

[felixo]

thanks, ill look at it :D

[felixo]

sshd[PID]: reverse mapping checking getaddrinfo for somehost.com failed - POSSIBLE BREAKIN ATTEMPT!

what do I make of this, and what should I do?

[nightblade]

[felixo]

[quote="srlinuxx"]Here's for your ntpd problem. Make sure your /etc/init.d/ntpd has something to this effect in there.

depend() {
need net
use dns logger
}
[/quote]

both my ntpd and ntp-client scripts have what you stated above, should it also depend on rp-pppoe? I dont use net.pppoe but rather rp-pppoe with rc-update....