Kernel upgarde causes IPTABLES SAME not working for me

Kernel upgarde causes IPTABLES SAME not working for me

[Wennie V. Lagmay]

Dear all, 

I am having a problem with the recent version of kernel (2.6.25-14-108) on Fedora Core 9 64 bit.
I am trying to enable the NATting using SAME command but I am getting an error "Iptables: No chain/target match by this name" but with earlier version of linux 2.6.23.1-42 iptables with SAME target is working; "iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -j SAME --to 10.10.10.1-10.10.10.2 --nodst"

I also try to recompile a 2.6.25 kernel but there is no luck.  Can you please help me to activate SAME target on the latest release of  kernel probably from 2.6.23 and latest.

My objective is to have a multiple source private IP going/NATed to multiple destination public IP with voice chat enable. 

Please take note that using SNAT I cannot enable voice chat; using masquerade I can enable voice chat but this is not suitable to our requirements. The best suitable for us is using SAME.

Can you please help me solve this problem. Also please put me on Cc: on any reply or comment so that I can see all of your reply.

Thank you very much and best regards,

Wennie

Re: Kernel upgarde causes IPTABLES SAME not working for me

[Phil Oester]

On Sun, Sep 14, 2008 at 03:04:11PM +0300, Wennie V. Lagmay wrote:
> Dear all, 
> 
> I am having a problem with the recent version of kernel (2.6.25-14-108) on Fedora Core 9 64 bit.
> I am trying to enable the NATting using SAME command but I am getting an error "Iptables: No chain/target match by this name" but with earlier version of linux 2.6.23.1-42 iptables with SAME target is working; "iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -j SAME --to 10.10.10.1-10.10.10.2 --nodst"

The SAME target has been removed from the kernel, and no longer
exists in 2.6.25.  You will have to use the SNAT or MASQUERADE
targets.

Phil

Re: Kernel upgarde causes IPTABLES SAME not working for me

[Wennie V. Lagmay]

Hi Phil,

Thank you very much for your reply. I tried using SNAT "iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -j SNAT --to-source 10.10.10.1-10.10.10.2" and surely this configuration can enable NATting between multiple private IP and multiple Public IP, however voice chat is not working (yahoo and msn messenger). Masquerade is working fine with voice chat however If i am not mistaken it's a multiple private to single public IP NATting. 


I have read that SAME is already obsoletes and according to an article NAT features works same as SAME but I dont know how to configure it. Can you please guide me how to use SNAT with multiple private IP to multiple Public IP that works the same as SAME target.

Again thank you very much and best regards,

Wennie

Please don't forget to put me on Cc:



----- Original Message -----
From: "Phil Oester" <kernel@linuxace.com>
To: "Wennie V. Lagmay" <wlagmay@yanbulink.net>
Cc: linux-kernel@vger.kernel.org
Sent: 14 September 2008 19:43:49 o'clock (GMT+0300) Asia/Kuwait
Subject: Re: Kernel upgarde causes IPTABLES SAME not working for me

On Sun, Sep 14, 2008 at 03:04:11PM +0300, Wennie V. Lagmay wrote:
> Dear all, 
> 
> I am having a problem with the recent version of kernel (2.6.25-14-108) on Fedora Core 9 64 bit.
> I am trying to enable the NATting using SAME command but I am getting an error "Iptables: No chain/target match by this name" but with earlier version of linux 2.6.23.1-42 iptables with SAME target is working; "iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -j SAME --to 10.10.10.1-10.10.10.2 --nodst"

The SAME target has been removed from the kernel, and no longer
exists in 2.6.25.  You will have to use the SNAT or MASQUERADE
targets.

Phil