From mboxrd@z Thu Jan 1 00:00:00 1970 From: Grant Taylor Subject: Re: NAT for multiple non-directly connected subnets Date: Fri, 09 Nov 2007 10:47:19 -0600 Message-ID: <47348F17.3000408@riverviewtech.net> References: <1194559495.19115.105.camel@grateful.d.umn.edu> <1194560755.19115.110.camel@grateful.d.umn.edu> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-Id: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: Mail List - Netfilter On 11/09/07 09:42, Bradley Kite wrote: > the connection-tracking needs to be turned off on the bridges in > order to make this work: Oh, you are running bridging (NOTHING at all wrong with that) but it does change things a bit. Had I known that you were running bridging I would have asked about the Bridged NetFilter configuration in your kernel. Based on the fact that you are running bridging and the fact that you have to touch IPTables for bridged traffic tells me that you are using Bridged NetFilter code. This makes it even more important to know what your IPTables configuration is to help solve your problem as it was. Seeing as how you have worked around your problem, we no longer need to see the output of iptables-save. I don't think you solved your real problem, rather worked around it. But hay, if that works for you and packets are moving like they need to, so be it and good for you. ;) Grant. . . .