Re: Confirm: letting certain packages pass through un-natted

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, September 27, 2005 02:17, David Leangen wrote:
>> What do the byte counters for this rule say when you execute :
>> iptables -nvL PREROUTING
>
> Hmmm... weird...
> [root@sannomiya ~]# iptables -nvL PREROUTING
> iptables: Table does not exist (do you need to insmod?)

Not at all ; my mistake : I forgot to add "-t nat" in the rule.

> I tried that. Apparently, the packets get routed to 192.168.2.1 as
> expected, so they must be getting eaten up by my iptables... I'll
> take another look to try to figure out why.

Check out Jörg's reply.
If the setup in his reply represents yours, is it really necessary to
do NAT for 192.168.1.0/24 to reach 192.168.2.0/24 ?
I'd say you should be able to reach 192.168.2.0/24 using routing only
(when FORWARD policy is ACCEPT and doesn't do filtering and ip_forward
is set to "1").


Gr,
Rob





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux