Re: Getting access out through gateway



On Thu, May 8, 2008 at 8:36 AM, Simon Slater <pyevet@xxxxxxxxxxx> wrote:
On Tue, 2008-05-06 at 12:56 +1000, Simon Slater wrote:
On Mon, 2008-05-05 at 13:37 -0500, Steven Tardy wrote:
cat /proc/sys/net/ipv4/ip_forward
=1 for both gateway and laptop

I can't see that the REJECT target at the end of the chain in the filter
table is the main part of the problem because when iptables are stopped,
the packet returned from the gateway box has the reset flag set.
Something in the network setup is awry.

--
What is the network address you are using? Something like 192.168.x.x?
I see on the gateway 192.168.0.0/24 is defined in the rules and on the
laptop 192.168.122.0/24. In the rules on the gateway I see a rule:

DROP all -- !192.168.0.0/24 anywhere

Does this not mean that all packets from any network but 192.168.0.x
will be dropped?

Max

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list



Relevant Pages

  • Re: OT iptables question
    ... > I'm updating a RH ipchains packet filter script from the dim past to ... > I noticed that when I specified the network the host is on, ... > the rule, and iptables seems to take it, and the chain seems to work. ... > filter on the DMZ, and I'd like to do it as rigorously as I can. ...
    (Debian-User)
  • Requesting Direction regarding iptables
    ... I am trying to setup my iptables to use squid as the gateway for the ... To get my cards to interact as a gateway I use the commands. ... iptables commands to use in my startup script to configure my network. ...
    (comp.os.linux.networking)
  • combining iptables with squid to set access to internet
    ... about network where everything happens. ... Default Gateway: 192.168.1.248 (points to local proxy ... Default policy for all iptables chains is ...
    (comp.os.linux.networking)
  • Re: Can I get email and Internet to dial automatically
    ... This is sort of like having a default gateway ... This should do the masquerading: ... iptables -t nat -A POSTROUTING -j MASQUERADE ... Don't forget to restart the network. ...
    (comp.os.linux.networking)
  • Re: Bridging network adapters in Linux
    ... ip addr add $address/$netbits dev br0 ... Either a default route ... two network devices assuming, ... This is done using the iptables mechanism. ...
    (comp.os.linux.networking)