Bertrand TACHAGO Computer specialist / Network administrator Cellular: (237) 975 55 31 ----- Original Message ----- From: "Ralf Spenneberg" <lists@xxxxxxxxxxxxxx> To: "Bertrand TACHAGO" <btachago@xxxxxxxxxxxx> Cc: "Netfilter" <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Tuesday, December 16, 2003 12:06 PM Subject: Re: Iptables and Zebra Am Die, 2003-12-16 um 10.34 schrieb Bertrand TACHAGO: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm > blocked because there's a firewall (iptables) problem. I had entered a > POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j > MASQUERADE) but the packets are not routed to the external interface. > Can somebody help me solve this problem (use zebra routing protocol to > route packets from my network to the Internet)? Why are you trying to setup zebra? If you just want the Linux box to operate as a simple router between two networks, remove zebra, activate forwarding and masquerading and you are done. Forwarding: sysctl -w net.ipv4.ip_forward=1 The needed static routes are usually set automatically as soon as the interfaces are initialized. > Cheers, Ralf -- Ralf Spenneberg RHCE, RHCX Book: VPN mit Linux Book: Intrusion Detection für Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org I'm trying to setup zebra because I have 3 subnets with 3 linux boxes configured as router with zebra and ospfd. Maybe if I activate Masquerading, it would work. Cheers,