Re: iptables : masq

[Payal@samba.org]

Hi,
Thanks for the mail.
I could see the rules properly now.
[root]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination
MASQUERADE  all  --  anywhere             anywhere

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

But now the problem is that if I try to ping a site or external ip 
from a computer from internal network I still don't get the site.
The command I used was,
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
Thanks a lot again and waiting for the replies.

rpayal@indiainfo.com
>Use
>#iptables -t nat -L
>
>-Sathayn
>
>----- Original Message -----
>From: Payal <rpayal@indiainfo.com>
>To: <netfilter@lists.samba.org>
>Sent: Thursday, June 13, 2002 3:28 PM
>Subject: iptables : masq
>
>
>Hi,
>As I said earlier I am using Mdk Linux 8.2 with kernel 2.4.18. I am 
>trying
>to
>shift from ipchains to iptables for a simple reson that I cannot 
>connect to
>one particular ftp site where ip_masq_ftp was required in earlier 
>versions
>of
>kernel. Now this module is no longer available. So, I have to shift 
>to
>iptables since connecting to that site is really imp.
>But I am having a problem. I read briefly NAT and iptables HOWTOs and
>decided
>the rule,
>iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
>
>My loaded modules by lsmod include,
>ipt_MASQUERADE          1504   5  (autoclean)
>iptable_mangle          2336   0  (autoclean) (unused)
>iptable_nat            15988   1  (autoclean) [ipt_MASQUERADE]
>ip_conntrack           15180   1  (autoclean) [ipt_MASQUERADE 
>iptable_nat]
>iptable_filter          1952   0  (autoclean)
>ip_tables              11584   6  [ipt_MASQUERADE iptable_mangle 
>iptable_nat
>iptable_filter]
>
>But my problem is that inspite of giving the above command I have,
>
>#iptables --list
>Chain INPUT (policy ACCEPT)
>target     prot opt source               destination
>
>Chain FORWARD (policy ACCEPT)
>target     prot opt source               destination
>
>Chain OUTPUT (policy ACCEPT)
>target     prot opt source               destination
>
>What is wrong now? Why is'nt my rule listed?
>I even have 1 in /proc/sys/net/ipv4/ip_forward.
>Please do tell as early as possible or atleast tell me how to get it 
>working
>under ipchains.
>
>Thanks a lot in advance and bye.
>-Payal
>p.s i have some problems with my present email address, it would be 
>great if
>you can cc the mail to payal99  @  cyberspace.org
>
>
>
---------------------------------------------
http://mail.indiainfo.com
India's first ISO certified portal
Check world time at http://time.indiainfo.com