Re: [gentoo-user] loopback into gentoo iptables

[Mick <michaelkintzios@gmail.com>]

On 05/10/2007, Hans-Werner Hilse <hilse@web.de> wrote:
> Hi,
>
> On Fri, 5 Oct 2007 10:42:42 -0500
> "Walter Willis" <walterwn@gmail.com> wrote:
>
> > I have modem asdl zyxel 660 and activate loopback with command: "ip nat
> > loopback on"
>
> Where do you enter that and why? What is the thing _you_ call a
> loopback? On what device or machine does it exist? You don't seem to be
> talking about the "ifup" tool (since you talk about "ip", which however
> does not know the "nat" mode?!?), and you don't seem to be talking
> about the lo device either.
>
> > the ask is:
> > it is into gentoo linux  with iptables ?
>
> Errm, again: What? Setting up you loopback device on gentoo is done
> automatically by /etc/init.d/net.lo. Should be run on bootup by rc,
> check "rc-update show".
>
> Setting up NAT works using a sysctl (or the procfs). Restricting the
> NAT works using iptables.
>
> > the compiler module especial for function?
>
> Errrr.... Again, not sure what you are asking here... Yes, you need
> kernel modules for both NAT to work and as well netfilter modules for
> the chains and targets and matches you want to use with iptables. They
> don't really have to be modules, you can compile them statically into
> the kernel as well.
>
> If unsure, rephrase your question -- and be a bit more verbose on what
> you intend to do... A bit more information might as well cure lack of
> proper vocabulary... Give examples, try to describe the setting.

My telepathic abilities are getting rusty these days, but if guessing
is allowed I think that the OP wanted to set up gentoo so that he
could access the Zyxel router's firewall and modify its rules, from
the Gentoo desktop.  Either that, or he's thinking of building an
embedded image for Zyxel?!

More info would no doubt help. If not anything else, tell us what
Zyxel can and cannot do - if it allows ssh access to its OS, then you
may be able to set up firewall builder on the Gentoo box and use that
to access/setup the Zyxel firewall.  If you are running OpenWRT (not
sure if this would run on Zyxel, but just don't stop me guessing now)
you should be able to cook something so that firewall builder could
hook into it.

Best of luck,
-- 
Regards,
Mick
-- 
gentoo-user@gentoo.org mailing list