Andreas Grabner wrote:
I know that the dns is working because when I do "ping www.google.es" from internal host this work.Hi
On Sat, Dec 11, 2004 at 01:45:08PM +0100, Antonio Pérez wrote:
iptables --table nat --append POSTROUTING --out-interface $ifc_internet -j MASQUERADEYou can ping so NAT and routing seems to work.
the hosts of the internal network can do ping to internet, and this is normal, but they can not open any web or conection the msn , they
only can do ping. This is very stranger. I try the kernels 2.6.7,2.6.7,2.6.8 and 2.6.9 and they do no work.
Are there any other rules in the FORWARD chain?
<try> maybe you should check if DNS is working? </try>
Can somebody help me, please?send more Info e.g. output of iptables -L -nvx
iptables -t nat -nvx
Sorry for my bad english.
me too ;-)
Andreas Grabner
There are not other rules in the FORWARD chain, look:
Chain INPUT (policy ACCEPT 2 packets, 100 bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 5958 packets, 2480411 bytes)
pkts bytes target prot opt in out source destination
and if i do iptables -t nat -L -nvx, then:
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 1 packets, 60 bytes)
pkts bytes target prot opt in out source destination
0 0 MASQUERADE all -- * eth1 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 1 packets, 60 bytes)
pkts bytes target prot opt in out source destination
And this is all, :)
