Re: iptables help

From: Juha Laiho (Juha.Laiho_at_iki.fi)
Date: 10/14/03


Date: Tue, 14 Oct 2003 20:32:21 GMT

vze2bd6u@verizon.net said:
>thanx... tried both those things... edited /etc/sysctl.conf and changed
>the 0 to 1 then issued the iptables -t nat -I POSTROUTING -o eth1 -j
>MASQUERADE but did not get out through the windows boxes... tried a
>reboot and a reissue... still not getting out... when i did a iptables
>-L i did not see that rule in the out put...
>
>confussed and still trying...

You'll see it with "iptables -t nat -vL". Ok, without the 'v' flag as
well, but omitting it IMHO cripples the iptables output next to useless.

But that looks strange -- it should be working. One thing to check is
whether the counters on that rule increment when you attempt to
communicate from the LAN machines.

Then of course you can try to run tcpdump on each of the interfaces
to see whether
- the packets even arrive to the gateway machine
- the packets go out from the other interfae of the gateway

-- 
Wolf  a.k.a.  Juha Laiho     Espoo, Finland
(GC 3.0) GIT d- s+: a C++ ULSH++++$ P++@ L+++ E- W+$@ N++ !K w !O !M V
         PS(+) PE Y+ PGP(+) t- 5 !X R !tv b+ !DI D G e+ h---- r+++ y++++
"...cancel my subscription to the resurrection!" (Jim Morrison)


Relevant Pages

  • Re: IPMP enabled serious Network Problems
    ... inet 10.xx.xx.49 netmask ffffff00 broadcast xxxxxxx.255 ... Turn off this option to track all network interfaces ... input packets with dribble condition detected ...
    (comp.unix.solaris)
  • Re: [PATCH 4/5] ieee802154: add documentation about our stack
    ... +Currently only IEEE 802.15.4 layer is implemented. ... +Most of IEEE 802.15.4 MLME interfaces are directly mapped on netlink commands. ... +2) 'SoftMAC' or just radio. ... are you sending IP packets over this ARPHRD_IEEE802154 network devices ...
    (Linux-Kernel)
  • Re: ISR CBAC prolem
    ... When I apply CBAC onto inside interface without any ACL's ... Have you determined if packets are arriving out of order? ... I'm running CEF and netflow on both outside and inside interfaces... ... > increase the inspection timouts. ...
    (comp.dcom.sys.cisco)
  • Re: Help Broadcasting a UDP packet on the LAN:URGENT
    ... We use all-ones packets well ... > network interfacethey should be using to do this. ... > interfaces because you have a per-network broadcast address if you want ... That way you get "for free" to control which interfaces should send ...
    (freebsd-net)
  • Bridging interfaces
    ... I seem to be having some trouble bridging interfaces in FreeBSD 6.2-STABLE. ... packets transmitted, 2 packets received, 0% packet loss ... inet 192.168.1.2 netmask 0xffffff00 broadcast 192.168.1.255 ...
    (freebsd-questions)