Re: NAT doesn't work (only a fraction of the forwarded packets reach the postrouting chain)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 2005-03-13 at 05:11, MÃrten Segerkvist wrote:
> I tried to log the packets reaching POSTROUTING with
> 
> > iptables -t nat -A POSTROUTING -j log
> 
> but none of them showed up in the syslog; that's a minor? problem though.

fixating on what does/doesn't get logged in NAT POSTROUTING is
counter-productive to the task at hand.  if you wish to log POSTROUTING
packets for the purposes of troubleshooting, please do it in MANGLE:

  iptables -t mangle -A POSTROUTING -j LOG --log-prefix "POSTROUTED: "

> I'd be most grateful for any suggestions!

the wire never lies:

run:
  tcpdump -n -nn -p -i wlan0 icmp

and ping something.

run:
  tcpdump -n -nn -p -i eth0 icmp

and ping something.

from looking at the counters, it looks like the packets are making it
out of the gateway, but not making it back to it for whatever reason...

-j

--
"Dear Mr. President, there are too many states nowadays, please
 eliminate three. I am not a crackpot."
	--The Simpsons




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux