Re: DNAT not working

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Payal Rathod írta:
On Wed, Apr 18, 2007 at 07:34:32PM +0200, Martijn Lievaart wrote:
Payal Rathod wrote:
...
Try -d 1.2.3.4 instead of -s.

But now it is timing out instead of connecting.
The new ruleset is at,

http://pastebin.ca/447539

Can someone tell what might be wrong?
...

1. Your FORWARD policy is ACCEPT... You do not need the lines 14 and 15. (AFAIK: If the target IP is on your computer then it fill not be FORWARDed but will be sent to a LOCAL process.) 2. You did not wrote but I assume you have a dynamically assigned IP connection. (Line 22.) If it is true then I would specify in this line the output interface: "-A POSTROUTING -s 10.10.0.0/255.255.255.0 -o ???ppp+??? -j MASQUERADE" 3. Line 23: ???? Why do you DNAT an outgoing connection back to you ??? Maybe you do not need that line at all...

Hope that helps.

Swifty




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux