Thank You Guido, maybe that's the way to go. Regarding the masquerade I tried that also. Icmp is enabled and what bothers me most it works even from inside to internet. (I can ping www.google.com from inside - see the first post in thread). I 'll try to install newer version of iptables. I hope that dependencies won't bother me. If I install newer version of iptables do I have to upgrade kernel or I can just try and see whether the first update (only iptables) will give results? On Sat, Feb 13, 2010 at 5:06 PM, Guido Trentalancia <guido@xxxxxxxxxxxxxxxx> wrote: > On Sat, 2010-02-13 at 00:03 +0100, Bojan Sukalo wrote: >> I'am trying to setup nat on RHEL4 box. >> >> Kernel: Linux 2.6.9-89.ELsmp x86_64x86 >> iptables: 1.2.11 > > Bojan, > > why don't you try to upgrade to a more recent version of iptables and if > possible to a more recent kernel ? You know, just in case... > > I have a setup similar to yours (except from POSTROUTING which is of > type MASQUERADING rather than SNAT) and it works all right. > > Also, have you checked other parameters such as TTL ? What about ICMP ? > You can enable ICMP with the following rule: > > -A INPUT -p icmp -j ACCEPT > > Guido > > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
