From: Tom van Leeuwen <tom.van.leeuwen@saasplaza.com>
To: budi wibowo <bwibowo@gmail.com>
Cc: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: router and masquerade
Date: Thu, 12 Sep 2013 17:19:25 +0200 [thread overview]
Message-ID: <5231DB7D.1090601@saasplaza.com> (raw)
In-Reply-To: <CAKnRR0bfVCa9x_cXSmzp2kV4TggC_3ckiMHmqgF3cZDw4cB=fw@mail.gmail.com>
Hi Budi,
I have experience running ubuntu10.04 and ubuntu12.04 as BGP routers and
it works perfectly.
They are not doing any NAT.
It must be your configuration.
Kind regards,
Tom van Leeuwen
On 09/12/2013 06:29 AM, budi wibowo wrote:
> outside IP is 8.8.8.8 google DNS.
> the ubuntu running BIRD for BGP and bgp connection is established.
> for ubuntu all search result after enable ip forwarding then do masquerade.
> and then i conclude that ubuntu cant be used as BGP core router, only
> can do routing is interface is masquerade.
> change OS to freebsd 9.1 and everything is working perfectly.
> Bird is working and no Nat required
>
>
> On Wed, Sep 11, 2013 at 10:13 PM, Tom van Leeuwen
> <tom.van.leeuwen@saasplaza.com> wrote:
>> With "outside" you mean an ip on internet?
>> What IP address does your client have that you don't want to MASQUERADE.
>>
>> Sounds like the outside world doesn't have a route to get back to your
>> client.
>>
>> Regards,
>> Tom
>>
>>
>> On 09/09/2013 01:41 AM, budi wibowo wrote:
>>> Hi
>>> i have question and i hope the question is on the right list .
>>>
>>> i setup PC router running on ubuntu 10.12, since it is router all IP
>>> address are public IP.
>>> Topology will be like this
>>>
>>>
>>>
>>> Router_to_Intl Router_to_local_IX
>>> | |
>>> | |
>>> | |
>>> | |
>>> \ /
>>> \ /
>>> \ /
>>> \ /
>>> \ /
>>> Distribution Router
>>> |
>>> |
>>> Client
>>>
>>> on Router_to_Intl i have define rule to ACCEPT all INPUT OUTPUT and
>>> FORWARD
>>> chain, also have enable ip_forward in sysctl.
>>> the result is client cant ping outside, but when i define MASQUERADE, ping
>>> and connection to internet are working normally.
>>> i dont want masquerade happen in this case
>>>
>>>
>>> anything missing on my configuration?
>>>
>>> Regards
>>>
>>> Budi Wibowo
>>> --
>>> To unsubscribe from this list: send the line "unsubscribe netfilter" in
>>> the body of a message to majordomo@vger.kernel.org
>>> More majordomo info at http://vger.kernel.org/majordomo-info.html
>>
next prev parent reply other threads:[~2013-09-12 15:19 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-09-08 23:41 router and masquerade budi wibowo
2013-09-11 15:13 ` Tom van Leeuwen
2013-09-12 4:29 ` budi wibowo
2013-09-12 15:19 ` Tom van Leeuwen [this message]
2013-09-12 15:29 ` Tom van Leeuwen
2013-09-12 23:25 ` budi wibowo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5231DB7D.1090601@saasplaza.com \
--to=tom.van.leeuwen@saasplaza.com \
--cc=bwibowo@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.