AW: Firewall workaround

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 Hi Benjamin,

 >>>    iptables --table nat --append POSTROUTING --out-interface eth0 -j
 >>> MASQUERADE
 >>>  iptables --append FORWARD --in-interface tun0 -j ACCEPT
 I'm not an expert, but could it be, that you took the wrong interface?
For Masquerating you need to use the external interface.
Is that eth0?? where is the tun0 interface come from??? 
 
for routing
10.3.0.0 is a privat address range, right??
217.172.172.1 is a public address range from Intergenia Technik (t-online)
if so, you can't send a privat address to a public address router/gateway!
if the router was setup right, the packet shoul'd die right there!
transformed to heat and blown out the fan :-))
by the way, i use a default route to the external iface and an route to the internal.
it's easyer!
 
misiu
 
 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux