Re: Masquerade don't masquerade

[George Alexandru Dragoi <waruiinu@gmail.com>]

The -L output is not enough, 
try iptables-save -t nat
Also make sure you don't filter stuff in -t filter chain FORWARD
And, did you echo 1 > /proc/sys/net/ipv4/ip_forward ? :D

On Wed, 25 Aug 2004 21:05:07 +0200, Mardaga Stephan <smardaga@brutele.be> wrote:
> Hello,
> 
> I'm new on this forum and hope you will help me.
> 
> I'm building a Debian server and it is the basic stage.
> I wish to run Iptables with masquerade.
> 
> detailed problem report could be find @ this address :
> http://homeusers.brutele.be/smardaga/masquerade/
> 
> resume :
> 
>  PC1                      Debian Serveur                     PC2
>  |                       Eth0      Eth1                      |
>  |.1                    .50|         |.1                   .2|
>  |                         |         |                       |
>  |                         |         |                       |
>  ---------------------------         -------------------------
>       192.168.0.x/24                       192.168.1.x/24
> 
> Masquerade don't work when pinging from PC2 (192.168.1.2) to PC1
> (192.168.0.1). PC1 receives icmp packet with IP source address 192.168.1.2.
> 
> tcpdump on eth0 :
> 
> 20:30:25.472725 192.168.1.2 > 192.168.0.1: icmp: echo request
> 20:30:30.972679 192.168.1.2 > 192.168.0.1: icmp: echo request
> 20:30:36.472321 192.168.1.2 > 192.168.0.1: icmp: echo request
> 20:30:41.972217 192.168.1.2 > 192.168.0.1: icmp: echo request
> 20:30:47.472049 192.168.1.2 > 192.168.0.1: icmp: echo request
> 20:30:52.972084 192.168.1.2 > 192.168.0.1: icmp: echo request
> 
>  iptables release 1.2.6a
>  Linux  2.4.18-bf2.4 #1 Son Apr 14 09:53:28 CEST 2002 i686 unknown
> 
> Chain PREROUTING (policy ACCEPT)
> target     prot opt source               destination
> 
> Chain POSTROUTING (policy ACCEPT)
> target     prot opt source               destination
> LOG        all  --  anywhere             anywhere           LOG level
> warning
> MASQUERADE  all  --  192.168.1.0/24       anywhere
> LOG        all  --  anywhere             anywhere           LOG level
> warning
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination
> 
> Any help and/or suggestions will be accepted gratefully.
> 
> Thanks in advance,
> 
> Stephan Mardaga
> 
> 


-- 
Bla bla