From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tom van Leeuwen Subject: Re: router and masquerade Date: Thu, 12 Sep 2013 17:19:25 +0200 Message-ID: <5231DB7D.1090601@saasplaza.com> References: <523088AA.3050509@saasplaza.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: budi wibowo Cc: "netfilter@vger.kernel.org" Hi Budi, I have experience running ubuntu10.04 and ubuntu12.04 as BGP routers and it works perfectly. They are not doing any NAT. It must be your configuration. Kind regards, Tom van Leeuwen On 09/12/2013 06:29 AM, budi wibowo wrote: > outside IP is 8.8.8.8 google DNS. > the ubuntu running BIRD for BGP and bgp connection is established. > for ubuntu all search result after enable ip forwarding then do masquerade. > and then i conclude that ubuntu cant be used as BGP core router, only > can do routing is interface is masquerade. > change OS to freebsd 9.1 and everything is working perfectly. > Bird is working and no Nat required > > > On Wed, Sep 11, 2013 at 10:13 PM, Tom van Leeuwen > wrote: >> With "outside" you mean an ip on internet? >> What IP address does your client have that you don't want to MASQUERADE. >> >> Sounds like the outside world doesn't have a route to get back to your >> client. >> >> Regards, >> Tom >> >> >> On 09/09/2013 01:41 AM, budi wibowo wrote: >>> Hi >>> i have question and i hope the question is on the right list . >>> >>> i setup PC router running on ubuntu 10.12, since it is router all IP >>> address are public IP. >>> Topology will be like this >>> >>> >>> >>> Router_to_Intl Router_to_local_IX >>> | | >>> | | >>> | | >>> | | >>> \ / >>> \ / >>> \ / >>> \ / >>> \ / >>> Distribution Router >>> | >>> | >>> Client >>> >>> on Router_to_Intl i have define rule to ACCEPT all INPUT OUTPUT and >>> FORWARD >>> chain, also have enable ip_forward in sysctl. >>> the result is client cant ping outside, but when i define MASQUERADE, ping >>> and connection to internet are working normally. >>> i dont want masquerade happen in this case >>> >>> >>> anything missing on my configuration? >>> >>> Regards >>> >>> Budi Wibowo >>> -- >>> To unsubscribe from this list: send the line "unsubscribe netfilter" in >>> the body of a message to majordomo@vger.kernel.org >>> More majordomo info at http://vger.kernel.org/majordomo-info.html >>