From: Jerry Alexander <jerrya@airmail.net>
To: netfilter@lists.netfilter.org, Jerry <jerry@mavenir.com>
Subject: iptables NAT and ICMP error messages
Date: Tue, 25 Oct 2005 15:00:01 -0500 [thread overview]
Message-ID: <435E8EC1.1050705@airmail.net> (raw)
Dear NF:
Set up three linux boxes.
Sending out iperf udp's to second box which is PREROUTED to
the 3rd box and
prerouted back to the second and then to the first:
Doing
-A PREROUTING -d 192.168.0.15 -i eth0 -p udp -j DNAT --to-destination
192.169.0.30
and so on.
Also do a POSTROUTING command to change the source address before
sending back
to the first box.
The good news is that the packets get routed from 1 to 2 to 3 to 2 to 1
and have the
altered src and dest address.
Problem is I am also getting tons of ICMP destination unreachable messages.
Tried putting in some FORWARD commands but this did nothing.
Can some one tell me the source of these ICMP error messages and how to
eliminate them?
Running linux 2.4-20 and "yes" , ip_forward is set to 1.
Jerry
next reply other threads:[~2005-10-25 20:00 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-10-25 20:00 Jerry Alexander [this message]
2005-10-26 17:09 ` iptables NAT and ICMP error messages Henrik Nordstrom
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=435E8EC1.1050705@airmail.net \
--to=jerrya@airmail.net \
--cc=jerry@mavenir.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.