안녕하세요? 저는 리눅스에 막 입문한 강진호 라고 합니다.
리눅스 설치 연습을 하면서 애로가 있어서 이렇게 질문을 드립니다.
 리눅스 파란 7.1 설치하고 IP마스커레이드 적용할려고 했는데요...
분명히 이전이랑 똑같이 적용해 준것 같은데(이전에는 적용이 잘 됐었는데...-.-) 이번에는 
문제가 있네요. 다름이 아니고 ipchains -F, ipchains -P DENY, ipchains -A forward -j MASQ -s
192.168.0.0/24 -d 0/0 로 명령을 내리면 적용은 되는데 재부팅후 자동적용이
않되네요...
부팅시 작동 적용을 위해서 /etc/rc.d/rc.local 에 /etc/rc.local/rc.firewall
추가 해줬구요...
rc.firewall 은 윈도우 쓰는 인터넷에서 카피하여 디스켓으로 옮긴다음, 리눅
스 서버로 가서
cp rc.firewall.txt /etc/rc.d/rc.firewall 로 복사한 다음 재부팅하고 chmod
700 /etc/rc.d/rc.firewall 명령을 내려서 rc.firewall 을 실행가능한 화일로
적용해 주었습니다.
모두 잘 설치가 되어 있는지 확인해봤구요..
 분명히 이렇게 하면 재부팅되면서 자동적용이 되어야 할것 같은데 왜 안되는것
일까요. 제가 초보임에도 불구하고 일단 네트워크 부터 공부하면서 리눅스의
특성을 이해해감으로 인해서 기본적인 것이라도 빼먹은것이 혹시 있을수 있음
을 감안해 주셔서 혹 도움이 되어 주실수 있으신 분이 계시다면 꼼꼼한 답변 부탁드리겠습
니다. 감사합니다.  * 다음은 제가 적용한 rc.firewall 의 내용 입니다...
 #!/bin/sh
#
# rc.firewall - Initial SIMPLE IP Masquerade test for 2.1.x and 2.2.x
kernels using IPCHAINS
#
# Load all required IP MASQ modules
#
# NOTE: Only load the IP MASQ modules you need. All current IP MASQ
modules
# are shown below but are commented out from loading.
 # Needed to initially load modules
#
/sbin/depmod -a
 # Supports the proper masquerading of FTP file transfers using the PORT
method
#
/sbin/modprobe ip_masq_ftp
 # Supports the masquerading of RealAudio over UDP. Without this module,
# RealAudio WILL function but in TCP mode. This can cause a
reduction
# in sound quality
#
#/sbin/modprobe ip_masq_raudio
 # Supports the masquerading of IRC DCC file transfers
#
#/sbin/modprobe ip_masq_irc
  # Supports the masquerading of Quake and QuakeWorld by default. This
modules is
# for for multiple users behind the Linux MASQ server. If you are
going to play
# Quake I, II, and III, use the second example.
#
#Quake I / QuakeWorld (ports 26000 and 27000)
#/sbin/modprobe ip_masq_quake
#
#Quake I/II/III / QuakeWorld (ports 26000, 27000, 27910, 27960)
#/sbin/modprobe ip_masq_quake ports=26000,27000,27910,27960
  # Supports the masquerading of the CuSeeme video conferencing software
#
#/sbin/modprobe ip_masq_cuseeme
 #Supports the masquerading of the VDO-live video conferencing software
#
#/sbin/modprobe ip_masq_vdolive
  #CRITICAL: Enable IP forwarding since it is disabled by default since
#
# Redhat Users: you may try changing the options
in /etc/sysconfig/network from:
#
# FORWARD_IPV4=false
# to
# FORWARD_IPV4=true
#
echo "1" > /proc/sys/net/ipv4/ip_forward
  # Dynamic IP users:
#
# If you get your IP address dynamically from SLIP, PPP, or DHCP,
enable this following
# option. This enables dynamic-ip address hacking in IP MASQ,
making the life
# with Diald and similar programs much easier.
#
#echo "1" > /proc/sys/net/ipv4/ip_dynaddr
  # MASQ timeouts
#
# 2 hrs timeout for TCP session timeouts
# 10 sec timeout for traffic after the TCP/IP "FIN" packet is received
# 160 sec timeout for UDP traffic (Important for MASQ'ed ICQ users)
#
/sbin/ipchains -M -S 7200 10 160
  # DHCP: For people who receive their external IP address from either
DHCP or BOOTP
# such as ADSL or Cablemodem users, it is necessary to use the
following
# before the deny command. The "bootp_client_net_if_name" should
be replaced
# the name of the link that the DHCP/BOOTP server will put an
address on to?
# This will be something like "eth0", "eth1", etc.
#
# This example is currently commented out.
#
#
#/sbin/ipchains -A input -j ACCEPT -i bootp_clients_net_if_name -s 0/0
67 -d 0/0 68 -p udp
 # Enable simple IP forwarding and Masquerading
#
# NOTE: The following is an example for an internal LAN address in the
192.168.0.x
# network with a 255.255.255.0 or a "24" bit subnet mask.
#
# Please change this network number and subnet mask to match
your internal LAN setup
#
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ