On Thu 9/19/13 10:36 PDT Phil Oester wrote: > On Thu, Sep 19, 2013 at 11:36:30AM -0500, iptables@xxxxxxxxxxx wrote: > > I'm trying to set up simple NAT/masquerading on a dual NIC host > > (hostname == "psi") running fedora 19, so hosts on my LAN can access > > Internet by routing thru host "psi". > > > > Interface p1p1 is on my LAN, p2p1 is on Internet. > > > > I got the "design" of below /etc/iptables from another of my older (fedora core 10) hosts, > > where NAT/masquerading works fine. > > > > Everything but the NAT/masquerading works. > > What does `sysctl net.ipv4.ip_forward` show? If 0, you need to change to 1. Thanks Phil, that was it! (embarrassed) I wrongly recalled updating /etc/sysctl.conf, and assumed net.ipv4.ip_forward was '1'. It's fixed/working across a reboot now. -- Tom -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html