Re: NAT Issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

Kiran Murari a écrit :

My setup is as shown below.
PC--------Router---------ISP

I established a connection with the ISP (PPP link) and I am pinging google.com from LAN side host.
Now if I disable WAN

What do you mean exactly ?

(leave the ping running) and then enable it, the session does not resume.

What session ?

The SNAT rules are in place.
# iptables -t nat -L POSTROUTING -n -v
Chain POSTROUTING (policy ACCEPT 13927 packets, 458K bytes)
pkts bytes target     prot opt in     out      source           destination
0 0 SNAT all -- * ppp0 0.0.0.0/0 0.0.0.0/0 to:xx:xx:xx:xx

Is the public address fixed or can it change at each PPP connection ?

# cat /proc/net/ip_conntrack | grep icmp
icmp 1 29 src=yy:yy:yy:yy dst=64.233.167.99 type=8 code=0 id=16446 packets=575 bytes=48300 [UNREPLIED] src=yy:yy:yy:yy dst=192.168.10.100 type=0 code=0 id=16446 packets=0 bytes=0 mark=0 use=1
yy:yy:yy:yy being the IP address of the LAN host.

I doubt that the source address of the expected reply is the LAN host address. What is 192.168.10.100 ?



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux