The hosting company have told me that masquerade is not activated:
MASQUERADE target isn\'t activate on your VPS.
You can use SNAT or DNAT target in nat tables.
So, how can I use SNAT and DNAT to route the traffic to my OpenVPN?
[root@vps8259 myscripts]# echo 1> /proc/sys/net/ipv4/ip_forward
[root@vps8259 myscripts]# iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
[root@vps8259 myscripts]# iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
[root@vps8259 openvpn]# iptables -A FORWARD -s 172.16.0.0/24 -j ACCEPT
[root@vps8259 openvpn]# iptables -A FORWARD -j REJECT
[root@vps8259 openvpn]# iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j MASQUERADE
iptables: Unknown error 4294967295
[root@vps8259 openvpn]# iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o venet0 -j MASQUERADE
iptables: Unknown error 4294967295
On 12/10/11 19:18, J Webster wrote:
The problem here may be venet0 interface. As far as I know, there is no
support for "nat" tables on OpenVZ virtual network interfaces.
Thanks. If that is the case, then how do I postroute on a virtual
network?
[root@vps8259 openvpn]# iptables -t nat -A POSTROUTING -s
10.8.0.0/24 -o venet0 -j MASQUERADE
iptables: Unknown error 4294967295
[root@vps8259 openvpn]# iptables -t nat -A POSTROUTING -s
10.8.0.0/24 -o venet0 -j MASQUERADE
iptables: Unknown error 4294967295
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
