From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on finch.gentoo.org X-Spam-Level: ** X-Spam-Status: No, score=2.3 required=5.0 tests=DATE_IN_FUTURE_03_06, DMARC_NONE,MAILING_LIST_MULTI autolearn=no autolearn_force=no version=4.0.0 Received: from obelix.spectraweb.ch (obelix.plusnet.ch [194.158.230.8]) by chiba.3jane.net (Postfix) with ESMTP id 2A9A5AC3AD for ; Wed, 5 Jun 2002 17:24:56 -0500 (CDT) Received: from seul.org (adsl-p42-dialup-179.adslplus.ch [195.141.144.179]) by obelix.spectraweb.ch (8.11.2/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id g55MOsp03842 for ; Thu, 6 Jun 2002 00:24:54 +0200 Message-ID: <3CFEE382.9050103@seul.org> Date: Thu, 06 Jun 2002 00:22:26 -0400 From: Marko Mikulicic User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.8) Gecko/20020204 X-Accept-Language: en-us MIME-Version: 1.0 To: gentoo-dev@gentoo.org Subject: Re: [gentoo-dev] net forwarding References: <3CFEDEF8.5050604@seul.org> <20020606001204.59b15ff8.spider@gentoo.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: gentoo-dev-admin@gentoo.org Errors-To: gentoo-dev-admin@gentoo.org X-BeenThere: gentoo-dev@gentoo.org X-Mailman-Version: 2.0.6 Precedence: bulk Reply-To: gentoo-dev@gentoo.org List-Help: List-Post: List-Subscribe: , List-Id: Gentoo Linux developer list List-Unsubscribe: , List-Archive: X-Archives-Salt: 9b3d9795-5d28-4e17-96bf-c58e237b3f84 X-Archives-Hash: a804aad0ba442b89492388952972e8eb Spider wrote: > Topposting ;) > > I prefer to use : > echo "1" > /proc/sys/net/ipv4/ip_forward > instead of the sysctl variant.. and I do this both "on" and "off" in my > iptables script.. that's where I consider it "fitting" may I ask you why do you prefer the /proc variant ? I have no prejudice on both, but I'm wondering why there is some many "sysctl" based scripts (in other distros). I thought iptables was the "IP packet filter". Ip forwarding can be used for other things, like openvpn tunneling or other routing stuff which doesn't depend on iptables, right? What if I don't have installed iptables ? Where it should go then ? I would avoid to complicate the /etc/init.d/net script. Perhaps a separated /etc/init.d/net_forwarding (not sure about the nomenclature) ? -- Marko