Re: NAT for multiple non-directly connected subnets

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/08/07 16:17, Bradley Kite wrote:
Linux machine has eth1, 192.168.1.50/30, connected to a router
(192.168.1.49/30). Behind this router are many other networks/subnets.
I'm trying to get the linux box to NAT all of them, not just addresses
within this tiny /30 subnet (as is the case now).

This should not be a problem.  Unless .... (See below.)

Hmm. The pre-routing couters are increasing, but that is all. When I
ping from the router then the post-routing counters increase (because
its directly connected).

Ok...

This was my assumption too but I must be missing something.

Could this by chance be a reverse path filtering issue? Is it possible that the firewall is not allowing the traffic from the non directly connected /30 to go through.

If you look at the counters in the filter:FORWARD chain do you see the traffic passing or is it even making it that far?



Grant. . . .
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux