All of lore.kernel.org
 help / color / mirror / Atom feed
From: Joseph Nicholson <wjnicholson@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Iptables is resetting
Date: Thu, 4 Aug 2005 09:50:04 -0500	[thread overview]
Message-ID: <62ddd33050804075057697edb@mail.gmail.com> (raw)

I have been seeing an issue lately when using Iptables on a Fedora
Core 3 box.  The version number is 1.2.11.  Some of my users have been
complaining that sometimes the connection will stop working.  If I go
in the box and re-apply the config then everything will start working
again.  I have listed the tables before I re-applied and see that they
are all still there, but for some reason they stop working.  I have
the following NAT rules running:

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DNAT       all  --  0.0.0.0/0            1.2.3.4       to:10.65.0.4
DNAT       all  --  0.0.0.0/0            1.2.3.5       to:10.65.1.5

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
SNAT       all  --  10.65.0.4            0.0.0.0/0           to:1.2.3.4
SNAT       all  --  10.65.1.5            0.0.0.0/0           to:1.2.3.5
SNAT       all  --  0.0.0.0/0            0.0.0.0/0           to:1.2.3.3

1.2.3.4 is a Cisco pix running a vpn tunnel to a remote location.  
1.2.3.5 is a desktop PC I use for remote management.
1.2.3.3 is the eth0 (outside interface) of the linux box.

This box is setup as a router.

When the VPN tunnel that 1.2.3.4 has is up and running I can do a
constant ping to the inside interface of the Pix.  Several times a day
it will stop responding to pings.  If I go and re-apply the iptables
using webmin, then it will start working again.

The last SNAT rules is for the 800+ users I have running on the inside
of this network.

I tried looking to see if this was a known issue, but I could not find
any info on it.  It is possible that since I am still fairly new to
iptables then i might not have been looking for the answer in the
correct place.

I read the NAT tutorials listed on the netfilter site and I am
confident that I have my rules setup properly.

I greatly appreciate any help in advance.  

-- 
Joseph Nicholson


             reply	other threads:[~2005-08-04 14:50 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-08-04 14:50 Joseph Nicholson [this message]
2005-08-05  6:28 ` Iptables is resetting Jan Engelhardt
2005-08-05 15:50   ` curby .

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=62ddd33050804075057697edb@mail.gmail.com \
    --to=wjnicholson@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.