Re: iptables, portforward, DNAT, SNAT

[Anders Fugmann <afu@fugmann.dhs.org>]

Thomas Meindl wrote:
> Antony Stone <Antony@Soft-Solutions.co.uk> wrote:
> 
> no, i didn't write it that way in the actual script.
> just to save some tipping here..
> 
> * stands for the three below
> 
> sorry for that confusing
> I simply should have copied and pasted it like
> 
> echo 1 > /proc/sys/net/ipv4/ip_dynaddr
> echo 1 > /proc/sys/net/ipv4/ip_forward
> echo 1 > /proc/sys/net/ipv4/tcp_syncookie
> 
>>># enable masquerading
>>>iptables -t NAT -A POSTROUTING -o $EXTIF -j MASQUERADE
>>
>>"NAT" in this rule should read "nat" - it matters !
>>
> 
> 
> spelling mistake sorry! nat
> 
Something that completely eludes me. You have hand typed the script you 
  post for debugging? Then how do you know that the error is in the script?

Try to narrow the problem down to a very small set of rules, and test 
the script. If it still does not work then post the script as is - copy 
and paste. I imagine that over 50% of all script questions posted to 
this list would answer itself, it the scripts posted had actually been 
tested.

I'm not flaming you, and apologize if you take it that way.
I'm trying to provide you with the tools to solve the problem. I guess 
that if you work systematically, then one of two will happen: you
solve the problem yourself, or you will be able to ask very 
accurate/specific questions to the list, which has a much higher chance 
of being answered correctly.

Regards
Anders Fugmann