2009/9/4 Nicholas Couchman <nick.couchman@xxxxxxxxx>: > I've done quite a bit of Google searching and haven't turned up anything definitive hear. I have a few Windows XP machines that I want to put behind a Linux/iptables NAT configuration. The domain controllers and WINS servers sit outside the NAT configuration. On the Linux side, I've enabled ip forwarding, and added the following rule with iptables: > > iptables -t nat -A POSTROUTING -s 172.16.34.0/24 -j SNAT --to-source 192.168.100.100 > > However, I'm getting the following error when trying to log on to Windows: > The system cannot log you on now because the domain DOMAIN is not > available. In an environment almost equal to yours, without doing any packet tracing, we've found that some XPs (I would say that just the first 3 or 4) can logon in the domain, but there is a point where noone else can logon. The only difference with your setup is the fact that we don't use a WINS server. -- Saludos. Gerardo. http://www.AjedrezVasco.com -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
