From: Tom van Leeuwen <tom.van.leeuwen@saasplaza.com>
To: budi wibowo <bwibowo@gmail.com>
Cc: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: router and masquerade
Date: Wed, 11 Sep 2013 17:13:46 +0200 [thread overview]
Message-ID: <523088AA.3050509@saasplaza.com> (raw)
In-Reply-To: <CAKnRR0ZrEyKL1oQTLiP8AoWhoC7kyTajbzboHdPn6-9RLxoBtA@mail.gmail.com>
With "outside" you mean an ip on internet?
What IP address does your client have that you don't want to MASQUERADE.
Sounds like the outside world doesn't have a route to get back to your
client.
Regards,
Tom
On 09/09/2013 01:41 AM, budi wibowo wrote:
> Hi
> i have question and i hope the question is on the right list .
>
> i setup PC router running on ubuntu 10.12, since it is router all IP
> address are public IP.
> Topology will be like this
>
>
>
> Router_to_Intl Router_to_local_IX
> | |
> | |
> | |
> | |
> \ /
> \ /
> \ /
> \ /
> \ /
> Distribution Router
> |
> |
> Client
>
> on Router_to_Intl i have define rule to ACCEPT all INPUT OUTPUT and FORWARD
> chain, also have enable ip_forward in sysctl.
> the result is client cant ping outside, but when i define MASQUERADE, ping
> and connection to internet are working normally.
> i dont want masquerade happen in this case
>
>
> anything missing on my configuration?
>
> Regards
>
> Budi Wibowo
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2013-09-11 15:13 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-09-08 23:41 router and masquerade budi wibowo
2013-09-11 15:13 ` Tom van Leeuwen [this message]
2013-09-12 4:29 ` budi wibowo
2013-09-12 15:19 ` Tom van Leeuwen
2013-09-12 15:29 ` Tom van Leeuwen
2013-09-12 23:25 ` budi wibowo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=523088AA.3050509@saasplaza.com \
--to=tom.van.leeuwen@saasplaza.com \
--cc=bwibowo@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.