echo "Start syn_cookies protection in proc ... " echo 1 >/proc/sys/net/ip_masq # if [ -x /sbin/ipchains ]; then echo "Start masquerade so that local network PCs can access outside." # Flush all existing rules - for safety! /sbin/ipchains -F forward # Set the timeout values ... from a UseNet post! /sbin/ipchains -M -S 7200 10 60 # Set default forwarding policy to DENY; this I am confused about. # This apparently protects my system from another host #masquerading as ME! /sbin/ipchains -P forward DENY # Allow the local network to firewall/masquerade to anywhere. /sbin/ipchains -A forward -j MASQ -s 192.168.1.0/24 -d 0.0.0.0/0 /sbin/ipchains -A forward -j MASQ -s 192.168.1.0/24 -d 0.0.0.0/0 -i ppp0 /sbin/ipchains -A forward -j MASQ -s 192.168.1.0/24 -i ppp0 echo 1 >/proc/sys/net/ipv4/ip_forward fi