Re: router and masquerade

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



outside IP is 8.8.8.8 google DNS.
the ubuntu running BIRD for BGP and bgp connection is established.
for ubuntu all search result after enable ip forwarding then do masquerade.
and then i conclude that ubuntu cant be used as BGP core router, only
can do routing is interface is masquerade.
change OS to freebsd 9.1 and everything is working perfectly.
Bird is working and no Nat required


On Wed, Sep 11, 2013 at 10:13 PM, Tom van Leeuwen
<tom.van.leeuwen@xxxxxxxxxxxxx> wrote:
> With "outside" you mean an ip on internet?
> What IP address does your client have that you don't want to MASQUERADE.
>
> Sounds like the outside world doesn't have a route to get back to your
> client.
>
> Regards,
> Tom
>
>
> On 09/09/2013 01:41 AM, budi wibowo wrote:
>>
>> Hi
>> i have question and i hope the question is on the right list .
>>
>> i setup PC router running on ubuntu 10.12, since it is router all IP
>> address are public IP.
>> Topology will be like this
>>
>>
>>
>> Router_to_Intl             Router_to_local_IX
>>         |                                   |
>>         |                                   |
>>         |                                   |
>>         |                                   |
>>          \                                 /
>>            \                              /
>>              \                           /
>>                \                        /
>>                 \                     /
>>             Distribution Router
>>                           |
>>                           |
>>                      Client
>>
>> on Router_to_Intl i have define rule to ACCEPT all INPUT OUTPUT and
>> FORWARD
>> chain, also have enable ip_forward in sysctl.
>> the result is client cant ping outside, but when i define MASQUERADE, ping
>> and connection to internet are working normally.
>> i dont want masquerade happen in this case
>>
>>
>> anything missing on my configuration?
>>
>> Regards
>>
>> Budi Wibowo
>> --
>> To unsubscribe from this list: send the line "unsubscribe netfilter" in
>> the body of a message to majordomo@xxxxxxxxxxxxxxx
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
>
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux