Michael.mast: Created page with "As of this writing I am still very green when it comes to IPTables. Used to know more about them, but as time went on and I worked with more systems the knowledge became a blu..."

2017-09-23T20:46:11Z

Created page with "As of this writing I am still very green when it comes to IPTables. Used to know more about them, but as time went on and I worked with more systems the knowledge became a blu..."

New page

As of this writing I am still very green when it comes to IPTables. Used to know more about them, but as time went on and I worked with more systems the knowledge became a blur.
<br>
I find myself in need of a tunneling through our network vendor's equipment. I don't trust them to diagnose their equipment so I am taking matters into my own hands. With already having a CentOS 7 box acting as DHCP and DNS, it was only natural to install openvpn and enable ip forwarding.
<br>
<ref>https://www.lisenet.com/2016/firewalld-rich-and-direct-rules-setup-rhel-7-server-as-a-router/</ref>
<pre>
firewall-cmd --permanent --add-interface=tun0 --zone=dmz
firewall-cmd --reload
nmcli con mod tun0 connection.zone dmz
nmcli c reload
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.d/ip_forward.conf
sysctl -p /etc/sysctl.d/ip_forward.conf
firewall-cmd --permanent --zone=dmz firewall-cmd --add-masquerade
firewall-cmd --reload

</pre>

CentOS 7 Router - Revision history

Michael.mast: Created page with "As of this writing I am still very green when it comes to IPTables. Used to know more about them, but as time went on and I worked with more systems the knowledge became a blu..."