Hi, On Thu, Nov 18, 2010 at 18:24, Marek Kierdelewicz <marek@xxxxxxxxx> wrote: >> -A FORWARD -s 192.168.1.0/24 -d 192.168.10.0/24 -i eth1 -o eth1 -m >> state --state NEW -j ACCEPT >>-A FORWARD -s 192.168.10.0/24 -d 192.168.1.0/24 -i eth1 -o eth1 -m >>state --state NEW -j ACCEPT > > I think you're missing forwarding of ESTABLISHED,RELATED between > 192.168.1.0/24 and 192.168.10.0/24. Try to change above rules to: > > -A FORWARD -s 192.168.1.0/24 -d 192.168.10.0/24 -i eth1 -o eth1 -j ACCEPT > -A FORWARD -s 192.168.10.0/24 -d 192.168.1.0/24 -i eth1 -o eth1 -j ACCEPT Excellent. That seems to have fixed it, thanks. Dan -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
