Hi, Show us your NAT rules... iptables -t nat -nL -v or Firewall dump with iptables-save Use tcpdump to see if the IP translation occurs. tcpdump -i <if_net> host <ip_address> -n 2012/5/30 miao hongbing <miao_hb@xxxxxxxxxxx>: > > > Hi Sirs, > > I am Steve Miao from China, currently we use broadcom's WiFi chipset, the chipset version is 5356 the software version is linux-2.6-router-5.70.48.10. > > We meet an issue about fast-nat, we plan to remove fast-nat and use common netfilter-nat base some reasons, when we removed fastnat by disabling CONFIG_BCM_NAT(the option of kernle's menuconfig) or let "ipv4_conntrack_fastnat=0", fast-nat is disabled succesfully, but netfilter-NAT can not work normally, the phenomenon is: we can ping any website, can not surf it. that means ICMP can work normally but TCP/UDP can not. > > Could anyone pls tell me how I can let netfilter-NAT work normally? if you know it pls kindly let me know. > > Thank you very much!!! > > Regards, > Steve -- > To unsubscribe from this list: send the line "unsubscribe netfilter" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html