All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Taylor, Grant" <gtaylor@riverviewtech.net>
To: netfilter@lists.netfilter.org
Subject: Re: routing within same nic card
Date: Tue, 31 May 2005 00:49:26 -0500	[thread overview]
Message-ID: <429BFAE6.90200@riverviewtech.net> (raw)
In-Reply-To: <000a01c565a0$867deee0$d40aa8c0@winxp>

> I have 1 NIC card with 2 ip address:
> IP1 = 192.168.3.1/255.255.255.192
> Network 1 = 192.168.3.0/255.255.255.192
> 
> IP2 = 192.168.4.1/255.255.255.248
> Network 2 = 192.168.4.0/255.255.255.248
> 
> My question, how can workstations from network 1 reaches the 
> workstations in network 2 and vice versa  using IPtables?

This really is not an IPTables issue as this is more a routing issue than it is a packet filtering issue.  All you need to do to enable the ""routing would be to enable IP forwarding via one of these two methods:

sysctl -w net.ipv4.ip_forward=1

or

echo "1" > /proc/sys/net/ipv4/ip_forward

The only thing that IPTables might be interfering with this on would be if you have your default FORWARD policy to DROP.  In that case you would need to do something like the following:

iptables -t filter -A FORWARD -i eth0 -o eth0 -j ACCEPT

Or if you want to be more specific and specify what subnets can forward you would need the following rules:

iptables -t filter -A FORWARD -i eth0 -o eth0 -s 192.168.3.0/24 -d 192.168.4.0/24 -j ACCEPT
iptables -t filter -A FORWARD -i eth0 -o eth0 -s 192.168.4.0/24 -d 192.168.3.0/24 -j ACCEPT



Grant. . . .


  reply	other threads:[~2005-05-31  5:49 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-05-31  5:20 routing within same nic card Wennie V. Lagmay
2005-05-31  5:49 ` Taylor, Grant [this message]
2005-05-31  6:10   ` Wennie V. Lagmay
2005-05-31  6:31     ` Taylor, Grant
2005-05-31  6:51       ` Wennie V. Lagmay
2005-05-31  6:59         ` Taylor, Grant

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=429BFAE6.90200@riverviewtech.net \
    --to=gtaylor@riverviewtech.net \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.