Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a desktop with two ethernet(etho,eth1) cards and OSSIM installed in it. I have a laptop with webmin installed, where i want to write rules for transferring packets from eth1 to eth0. Both the laptop( and desktop( are in same network

share|improve this question

closed as off topic by Scott Pack, Terry Chia, Polynomial, Æsahættr, Gilles Dec 9 '12 at 17:32

Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

I'm not sure I fully understand the role of the laptop. You can put two network cards onto the same network segment by bridging them, or by adding iptables rules. Neither of these however involve the laptop... – lynks Dec 7 '12 at 18:16
i am using webmin in my laptop, and ethernet cards are in desktop. How to add rules to iptables? @lynks – Mahesh Vemuri Dec 7 '12 at 18:19
I would suggest you ask this on I have never heard of webmin or ossim, but this is a pretty simple goal to achieve on the linux machine. Remember to include your linux distro also. – lynks Dec 7 '12 at 18:22
okay, sure. TQ @lynks – Mahesh Vemuri Dec 7 '12 at 18:22
up vote 0 down vote accepted

I have flushed my iptable and added new rules. OSSIM had its own iptables and i dint use webmin.

iptables -A INPUT -s 0/0 -i eth0 -d -p TCP -j ACCEPT 

iptables -A POSTROUTING -t nat -o eth1 -s -d 0/0 -j MASQUERADE 

iptables -A FORWARD -t filter -o eth1 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT 

iptables -A FORWARD -t filter -i eth1 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

And it worked out.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.