{"action":"created","issue":{"url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/1","labels_url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/1/comments","events_url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/1/events","html_url":"https://github.com/QueuingKoala/netfilter-samples/issues/1","id":68873253,"number":1,"title":"Sharing internet use case","user":{"login":"kaihendry","id":765871,"avatar_url":"https://avatars.githubusercontent.com/u/765871?v=3","gravatar_id":"","url":"https://api.github.com/users/kaihendry","html_url":"https://github.com/kaihendry","followers_url":"https://api.github.com/users/kaihendry/followers","following_url":"https://api.github.com/users/kaihendry/following{/other_user}","gists_url":"https://api.github.com/users/kaihendry/gists{/gist_id}","starred_url":"https://api.github.com/users/kaihendry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaihendry/subscriptions","organizations_url":"https://api.github.com/users/kaihendry/orgs","repos_url":"https://api.github.com/users/kaihendry/repos","events_url":"https://api.github.com/users/kaihendry/events{/privacy}","received_events_url":"https://api.github.com/users/kaihendry/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-04-16T08:33:03Z","updated_at":"2015-04-16T17:34:16Z","closed_at":null,"body":"Which rules do I use for sharing an Internet connection?\r\n\r\n* https://wiki.archlinux.org/index.php/Internet_sharing\r\n* https://bbs.archlinux.org/viewtopic.php?pid=1517864#p1517864\r\n\r\nSidenote: To simple flush iptables, one recommends https://github.com/QueuingKoala/netfilter-samples/blob/master/reset-rules/reset-loaded-nf-tables.sh ? Seems crazy."},"comment":{"url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/comments/93792379","html_url":"https://github.com/QueuingKoala/netfilter-samples/issues/1#issuecomment-93792379","issue_url":"https://api.github.com/repos/QueuingKoala/netfilter-samples/issues/1","id":93792379,"user":{"login":"QueuingKoala","id":3850683,"avatar_url":"https://avatars.githubusercontent.com/u/3850683?v=3","gravatar_id":"","url":"https://api.github.com/users/QueuingKoala","html_url":"https://github.com/QueuingKoala","followers_url":"https://api.github.com/users/QueuingKoala/followers","following_url":"https://api.github.com/users/QueuingKoala/following{/other_user}","gists_url":"https://api.github.com/users/QueuingKoala/gists{/gist_id}","starred_url":"https://api.github.com/users/QueuingKoala/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/QueuingKoala/subscriptions","organizations_url":"https://api.github.com/users/QueuingKoala/orgs","repos_url":"https://api.github.com/users/QueuingKoala/repos","events_url":"https://api.github.com/users/QueuingKoala/events{/privacy}","received_events_url":"https://api.github.com/users/QueuingKoala/received_events","type":"User","site_admin":false},"created_at":"2015-04-16T17:34:16Z","updated_at":"2015-04-16T17:34:16Z","body":"The rules-edge-router is probably what you want; this said, if you're sharing Internet from a system that isn't itself connected to your ISP, you're not technically an \"edge router\", but the example ruleset uses the MASQUERADE target, which will work if you're issued RFC1918 to the system you're sharing through as well.\r\n\r\nSo everything should just work for you there, once you tune the example for your own networks. Remember that you might need to add additional rules to permit traffic you expect to work, such as SSH access to your own router, for instance."}}