iptables -A FORWARD -i routerip -o gatewayip -m state --state  ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i gatewayip -o routerip -j ACCEPT
iptables -t nat -A POSTROUTING -o routerip -j MASQUERADE

note routerip:is the ip address in which connected to router

gatwayip = is the ip address of your network ip first or second nic :-)

Diaa Radwan

This command enables ip forwarding in the kernel

echo 1 > /proc/net/ipv4/ip_forward

but it's not secure if you haven't set up your iptables firewall correctly.

or if you are just forwarding web traffic, just use squid and set the default gateway on the server to the gateway for the wan

IMO, You shouldn't have to forward them. The proxy will automatically connect using the most correct interface

- I'm a code junkie security enthusiast

- http://pronco.manalaa.net