netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* iptables
@ 2009-04-27  8:05 Manu
  2009-04-29 20:32 ` iptables Jan Engelhardt
  0 siblings, 1 reply; 12+ messages in thread
From: Manu @ 2009-04-27  8:05 UTC (permalink / raw)
  To: Netfilter Developer Mailing List

Hi list,

if I use command:

#iptables -nvL -t mangle

I get:

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               
destination
insmod: ip_tables.ko: no module by that name found
modprobe: failed to load module ip_tables
insmod: ip_tables.ko: no module by that name found
modprobe: failed to load module ip_tables
insmod: ip_tables.ko: no module by that name found
modprobe: failed to load module ip_tables
insmod: ip_tables.ko: no module by that name found
modprobe: failed to load module ip_tables
    0     0 MARK       all  --  *      *       10.0.20.2            
0.0.0.0/0           MARK set 0x14


Everything works fine, but I get this error message?
My kernel is built with every point of iptables stuff included, not as 
module.
This error occurs only if I did an entry with MARK target, and it 
depends on iptables-version.
with iptables v.1.2.9 there is no error displayed.


iptables: v1.4.3.2
kernel: 2.6.23.9

Manu

^ permalink raw reply	[flat|nested] 12+ messages in thread
[parent not found: <BANLkTi=G1ecs9wx+QgAcUphK2-jg60nbAw@mail.gmail.com>]
[parent not found: <20040205052840.10884.25667.Mailman@netfilter-sponsored-by.noris.net>]
* iptables
@ 2004-01-16 22:36 Wilmar jose  wagner
  2004-01-22 22:33 ` iptables Pablo Neira
  0 siblings, 1 reply; 12+ messages in thread
From: Wilmar jose  wagner @ 2004-01-16 22:36 UTC (permalink / raw)
  To: netfilter-devel

[-- Attachment #1: Type: text/plain, Size: 166 bytes --]

I migrate from iptables 1.2.7 to 1.2.9 and after the MASQUERADE     is no more accepted

My syntax is:

iptables -t nat -A POSTROURING -o ppp0 -j MASQUERADE



[-- Attachment #2: Type: text/html, Size: 738 bytes --]

^ permalink raw reply	[flat|nested] 12+ messages in thread
* iptables
@ 2002-11-18 22:30 Alexandre Carlos
  0 siblings, 0 replies; 12+ messages in thread
From: Alexandre Carlos @ 2002-11-18 22:30 UTC (permalink / raw)
  To: netfilter-devel

Hi all

My experimental backbone is the following:

           67.91  4.2     4.3   1.3   1.1    10.1
             --------        ------       --------
 67.90- | ingress |----| core |----| egrees |-----10.2
             --------         -----        --------


I´m using IPTABLES version 1.2.4-dscp do set up the tos value of the
packets. I´m creating the following rule on the ingress and the egress
hosts.

iptables -A PREROUTING -t mangle -p icmp -j FTOS --set-ftos 0x28 or
iptables -A FORWARD -t mangle -p icmp -j FTOS --set-ftos 0x28

But when i try do ping from 67.90 to 10.2

The chechshum of the ip on the reply message is incorrect, so the packet is
droped on core hosts.

I would like to know, how can i avoid dropping the packet and still using
the same version of iptables and rules

Alex

^ permalink raw reply	[flat|nested] 12+ messages in thread
* IPtables
@ 2002-10-17 23:25 Alexandre Carlos
  0 siblings, 0 replies; 12+ messages in thread
From: Alexandre Carlos @ 2002-10-17 23:25 UTC (permalink / raw)
  To: netfilter-devel

I have the following network


            B
          /  |  \
A1--A  |    C--C1
          \  |    /
             D

I wanto A1 to ping C1 through the following path a-b-c,
so i created the following rule in the nat table of iptable

iptable -t nat -A PREROUTING -s 10.1.1.0/24 -d 192.168.67.0/24 -p icmp -j
DNAT --to-destination 192.168.3.1

The network 10.1.1.0 representes A1, the network 192.168.67.0 C1 and the
address 192.168.3.1 is the interface that the packet shoulkd reach B.

But when i start the ping i can´t capture the packet using the sniffer and
when a turn down all the interfaces of B and D the ping don´t stop.

Can anyone help me please.

Regards,

Alex

^ permalink raw reply	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2011-06-02 11:48 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2009-04-27  8:05 iptables Manu
2009-04-29 20:32 ` iptables Jan Engelhardt
2009-05-05 13:38   ` iptables Patrick McHardy
2009-05-05 19:26     ` iptables Jan Engelhardt
2009-05-06  7:53       ` iptables Manu
     [not found] <BANLkTi=G1ecs9wx+QgAcUphK2-jg60nbAw@mail.gmail.com>
2011-06-02 11:47 ` Iptables Pablo Neira Ayuso
     [not found] <20040205052840.10884.25667.Mailman@netfilter-sponsored-by.noris.net>
2004-02-09  4:48 ` iptables VeNoMouS
2004-02-14 20:17   ` iptables Harald Welte
  -- strict thread matches above, loose matches on Subject: below --
2004-01-16 22:36 iptables Wilmar jose  wagner
2004-01-22 22:33 ` iptables Pablo Neira
2002-11-18 22:30 iptables Alexandre Carlos
2002-10-17 23:25 IPtables Alexandre Carlos

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).