On Tuesday 16 December 2003 9:34 am, Bertrand TACHAGO wrote: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm blocked > because there's a firewall (iptables) problem. I had entered a POSTROUTING > rule (iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE) but the packets > are not routed to the external interface. Can somebody help me solve this > problem (use zebra routing protocol to route packets from my network to the > Internet)? Netfilter does not route packets for you. It can change the source or destination addresses, and it can block certain packets from being routed, but the decision about where / how / why to route packets is not made by netfilter. The rule you have given above will make sure that all packets leaving interface eth0 will have the IP address of that interface as their source address. It does not affect in any way which packets get routed via eth0 on their way anywhere else. Sorry I can't be more help, but I wanted to make sure you understood that a routing problem is not a netfilter problem. Antony. -- The difference between theory and practice is that in theory there is no difference, whereas in practice there is. Please reply to the list; please don't CC me.