netfilter/iptables bug ?

netfilter/iptables bug ?

[J.A. Magallon]

Hi all...

I'm trying to do NAT from a internal eth1 to external eth0 (connected
with a cable modem). Every doc I read says I should do:

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

But I just keep getting:

iptables: Invalid argument

Kernel: 2.4.21-pre6 + -pre5-aa. iptables 1.2.7a.
Modules loaded:

ipt_state               1080   0  (unused)
iptable_mangle          2776   0  (autoclean) (unused)
ipt_MASQUERADE          2296   0  (autoclean)
iptable_nat            22136   0  (autoclean) [ipt_MASQUERADE]
ip_conntrack           26848   2  (autoclean) [ipt_state ipt_MASQUERADE iptable_nat]

Is anybody aware of any obscure bug ? What does fail ?
I have read reports, for example, of this same command working on
RH 7.2 and faling the same way on 7.3 (I use Mandrake 9.1).

Any idea would be appreciated. TIA.

-- 
J.A. Magallon <jamagallon@able.es>      \                 Software is like sex:
werewolf.able.es                         \           It's better when it's free
Mandrake Linux release 9.1 (Bamboo) for i586
Linux 2.4.21-pre6-jam1 (gcc 3.2.2 (Mandrake Linux 9.1 3.2.2-3mdk))

Re: netfilter/iptables bug ?

[Martin Josefsson]

On Wed, 2003-04-02 at 00:44, J.A. Magallon wrote:
> Hi all...
> 
> I'm trying to do NAT from a internal eth1 to external eth0 (connected
> with a cable modem). Every doc I read says I should do:
> 
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> 
> But I just keep getting:
> 
> iptables: Invalid argument
> 
> Kernel: 2.4.21-pre6 + -pre5-aa. iptables 1.2.7a.

Recompile iptables against your new kernel.
A major NAT patch (newnat) went into 2.4.20 which changed a lot of
structures. A recompile against a >= 2.4.20 kernel will get it working
again.

I suggest that you post further mail about iptables-problems to
netfilter@lists.netfilter.org as that's where you are most likely to get
help.

-- 
/Martin

Re: netfilter/iptables bug ?

[J.A. Magallon]

On 04.02, Martin Josefsson wrote:
> On Wed, 2003-04-02 at 00:44, J.A. Magallon wrote:
> > Hi all...
> > 
> > I'm trying to do NAT from a internal eth1 to external eth0 (connected
> > with a cable modem). Every doc I read says I should do:
> > 
> > iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> > 
> > But I just keep getting:
> > 
> > iptables: Invalid argument
> > 
> > Kernel: 2.4.21-pre6 + -pre5-aa. iptables 1.2.7a.
> 
> Recompile iptables against your new kernel.
> A major NAT patch (newnat) went into 2.4.20 which changed a lot of
> structures. A recompile against a >= 2.4.20 kernel will get it working
> again.
> 
> I suggest that you post further mail about iptables-problems to
> netfilter@lists.netfilter.org as that's where you are most likely to get
> help.
> 

Thankyou very much.

Sometimes I doubt if this is a maling list or an IRC channel ;))


-- 
J.A. Magallon <jamagallon@able.es>      \                 Software is like sex:
werewolf.able.es                         \           It's better when it's free
Mandrake Linux release 9.1 (Bamboo) for i586
Linux 2.4.21-pre6-jam1 (gcc 3.2.2 (Mandrake Linux 9.1 3.2.2-3mdk))