Re: MASQUERADE

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Friday 09 July 2004 11:35 am, Erik Wikström wrote:

> On Fri, Jul 09, 2004 at 09:19:58AM +0530, Payal Rathod wrote:
> > Hi,
> > Is there any different way to do MASQUERADE in kernel 2.6.3-7  with
> > iptables v1.2.9?
> > I get,
> >
> > # iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> > iptables: Invalid argument
> >
> > A quick look at the man page did not suggest anything.
> > Any ideas to what is missing?
>
> First of all I'd like to say that I'm in no way an expert but are you
> sure that you have the right stuff compiled in kernel or as modules? In
> 2.6.7 I had to select to compile MASQUERADE in the kernel, same thing
> with the mangle table if I remember correctly.

I see no reason not to compile everything you need for netfilter into the 
kernel (instead of building as modules).   That way you know all the support 
is there from bootup, nothing can be removed through forgetfulness or malice, 
and you don't have to worry about whether A depends on B, depends on C, etc..

Sure, if you want to use a new feature you didn't previously build, you need 
to recompile the kernel and do a reboot, but in most cases that should be (a) 
infrequent, and (b) pretty simple.

Regards,

Antony.

-- 
In Heaven, the police are British, the chefs are Italian, the beer is Belgian, 
the mechanics are German, the lovers are French, the entertainment is 
American, and everything is organised by the Swiss.

In Hell, the police are German, the chefs are British, the beer is American, 
the mechanics are French, the lovers are Swiss, the entertainment is Belgian, 
and everything is organised by the Italians.

                                                     Please reply to the list;
                                                           please don't CC me.