* POSTROUTING & DNAT
@ 2003-05-22 13:01 Leszek Zur
2003-09-10 3:19 ` Diego R. Rodriguez Herlein
2003-09-10 3:39 ` Diego R. Rodriguez Herlein
0 siblings, 2 replies; 7+ messages in thread
From: Leszek Zur @ 2003-05-22 13:01 UTC (permalink / raw)
To: netfilter
Hello
iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
iptables: Invalid argument
Can anyone help me understand what is happening?
iptables v1.2.8
kernel 2.4.20
thnx
Leszek
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur
@ 2003-09-10 3:19 ` Diego R. Rodriguez Herlein
2003-09-10 3:39 ` Diego R. Rodriguez Herlein
1 sibling, 0 replies; 7+ messages in thread
From: Diego R. Rodriguez Herlein @ 2003-09-10 3:19 UTC (permalink / raw)
To: Leszek Zur, netfilter
I have the some problem with rh 8, kernel 2.4.20 iptables 1.2.7a
Can anyone help me ???
Regards
Diego
----- Original Message -----
From: "Leszek Zur" <lzur@record.com.pl>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, May 22, 2003 10:01 AM
Subject: POSTROUTING & DNAT
> Hello
>
> iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
> iptables: Invalid argument
>
> Can anyone help me understand what is happening?
>
> iptables v1.2.8
> kernel 2.4.20
>
> thnx
>
> Leszek
>
>
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur
2003-09-10 3:19 ` Diego R. Rodriguez Herlein
@ 2003-09-10 3:39 ` Diego R. Rodriguez Herlein
2003-09-10 11:59 ` Thomas Klettke
1 sibling, 1 reply; 7+ messages in thread
From: Diego R. Rodriguez Herlein @ 2003-09-10 3:39 UTC (permalink / raw)
To: Leszek Zur, netfilter
Sorry those are my rules (DMZ)
HTTP
#
iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \
--to-destination $IP_DMZ
iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \
--to-source $IP_LAN
iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \
--to-destination $IP_DMZ
#
#
#
work great with rh 7.1 kernel 2.4.17
----- Original Message -----
From: "Leszek Zur" <lzur@record.com.pl>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, May 22, 2003 10:01 AM
Subject: POSTROUTING & DNAT
> Hello
>
> iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
> iptables: Invalid argument
>
> Can anyone help me understand what is happening?
>
> iptables v1.2.8
> kernel 2.4.20
>
> thnx
>
> Leszek
>
>
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-09-10 3:39 ` Diego R. Rodriguez Herlein
@ 2003-09-10 11:59 ` Thomas Klettke
2003-09-10 21:55 ` Diego R. Rodriguez Herlein
0 siblings, 1 reply; 7+ messages in thread
From: Thomas Klettke @ 2003-09-10 11:59 UTC (permalink / raw)
To: Diego R. Rodriguez Herlein; +Cc: Leszek Zur, netfilter
Is NAT support compiled into the kernel?
On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote:
> Sorry those are my rules (DMZ)
>
> HTTP
> #
> iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \
> --to-destination $IP_DMZ
> iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \
> --to-source $IP_LAN
> iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \
> --to-destination $IP_DMZ
> #
> #
> #
> work great with rh 7.1 kernel 2.4.17
>
>
> ----- Original Message -----
> From: "Leszek Zur" <lzur@record.com.pl>
> To: <netfilter@lists.netfilter.org>
> Sent: Thursday, May 22, 2003 10:01 AM
> Subject: POSTROUTING & DNAT
>
>
> > Hello
> >
> > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
> > iptables: Invalid argument
> >
> > Can anyone help me understand what is happening?
> >
> > iptables v1.2.8
> > kernel 2.4.20
> >
> > thnx
> >
> > Leszek
> >
> >
> >
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-09-10 11:59 ` Thomas Klettke
@ 2003-09-10 21:55 ` Diego R. Rodriguez Herlein
2003-09-11 0:29 ` Thomas Klettke
0 siblings, 1 reply; 7+ messages in thread
From: Diego R. Rodriguez Herlein @ 2003-09-10 21:55 UTC (permalink / raw)
To: Thomas Klettke; +Cc: Leszek Zur, netfilter
nop
like module ...
I am really lost about it
Thank you for your answer!
Regards,
Diego
PD Sorry about my english
----- Original Message -----
From: "Thomas Klettke" <thomas@klettke.us>
To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar>
Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org>
Sent: Wednesday, September 10, 2003 8:59 AM
Subject: Re: POSTROUTING & DNAT
> Is NAT support compiled into the kernel?
>
>
> On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote:
> > Sorry those are my rules (DMZ)
> >
> > HTTP
> > #
> > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \
> > --to-destination $IP_DMZ
> > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \
> > --to-source $IP_LAN
> > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \
> > --to-destination $IP_DMZ
> > #
> > #
> > #
> > work great with rh 7.1 kernel 2.4.17
> >
> >
> > ----- Original Message -----
> > From: "Leszek Zur" <lzur@record.com.pl>
> > To: <netfilter@lists.netfilter.org>
> > Sent: Thursday, May 22, 2003 10:01 AM
> > Subject: POSTROUTING & DNAT
> >
> >
> > > Hello
> > >
> > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
> > > iptables: Invalid argument
> > >
> > > Can anyone help me understand what is happening?
> > >
> > > iptables v1.2.8
> > > kernel 2.4.20
> > >
> > > thnx
> > >
> > > Leszek
> > >
> > >
> > >
> >
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-09-10 21:55 ` Diego R. Rodriguez Herlein
@ 2003-09-11 0:29 ` Thomas Klettke
2003-09-11 21:35 ` Diego R. Rodriguez Herlein
0 siblings, 1 reply; 7+ messages in thread
From: Thomas Klettke @ 2003-09-11 0:29 UTC (permalink / raw)
To: Diego R. Rodriguez Herlein; +Cc: Leszek Zur, netfilter
Diego,
I'm not quite sure about your answer, I understand from it this:
You do not have NAT support compiled into your kernel.
You have it compiled as a kernel module though.
Is this correct?
On Wed, 2003-09-10 at 16:55, Diego R. Rodriguez Herlein wrote:
> nop
> like module ...
> I am really lost about it
> Thank you for your answer!
> Regards,
>
> Diego
>
> PD Sorry about my english
> ----- Original Message -----
> From: "Thomas Klettke" <thomas@klettke.us>
> To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar>
> Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org>
> Sent: Wednesday, September 10, 2003 8:59 AM
> Subject: Re: POSTROUTING & DNAT
>
>
> > Is NAT support compiled into the kernel?
> >
> >
> > On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote:
> > > Sorry those are my rules (DMZ)
> > >
> > > HTTP
> > > #
> > > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \
> > > --to-destination $IP_DMZ
> > > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \
> > > --to-source $IP_LAN
> > > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \
> > > --to-destination $IP_DMZ
> > > #
> > > #
> > > #
> > > work great with rh 7.1 kernel 2.4.17
> > >
> > >
> > > ----- Original Message -----
> > > From: "Leszek Zur" <lzur@record.com.pl>
> > > To: <netfilter@lists.netfilter.org>
> > > Sent: Thursday, May 22, 2003 10:01 AM
> > > Subject: POSTROUTING & DNAT
> > >
> > >
> > > > Hello
> > > >
> > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2
> > > > iptables: Invalid argument
> > > >
> > > > Can anyone help me understand what is happening?
> > > >
> > > > iptables v1.2.8
> > > > kernel 2.4.20
> > > >
> > > > thnx
> > > >
> > > > Leszek
> > > >
> > > >
> > > >
> > >
> >
>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT
2003-09-11 0:29 ` Thomas Klettke
@ 2003-09-11 21:35 ` Diego R. Rodriguez Herlein
0 siblings, 0 replies; 7+ messages in thread
From: Diego R. Rodriguez Herlein @ 2003-09-11 21:35 UTC (permalink / raw)
To: Thomas Klettke; +Cc: Leszek Zur, netfilter
yes, sorry about my english .. I have nat compiled as kernel module ...
I found the problem
I fix it ...
I must compile the kernel with this ...
Networking options ---> IP: Netfilter Configuration --->[*] NAT of
local connections (READ HELP)
When I include this the rule of the output chain was accept
I hope this help anyone.
Again sorry about my english y thanks for all
Best regards,
Diego
----- Original Message -----
From: "Thomas Klettke" <thomas@klettke.us>
To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar>
Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org>
Sent: Wednesday, September 10, 2003 9:29 PM
Subject: Re: POSTROUTING & DNAT
> Diego,
> I'm not quite sure about your answer, I understand from it this:
>
> You do not have NAT support compiled into your kernel.
> You have it compiled as a kernel module though.
>
> Is this correct?
>
>
>
>
> On Wed, 2003-09-10 at 16:55, Diego R. Rodriguez Herlein wrote:
> > nop
> > like module ...
> > I am really lost about it
> > Thank you for your answer!
> > Regards,
> >
> > Diego
> >
> > PD Sorry about my english
> > ----- Original Message -----
> > From: "Thomas Klettke" <thomas@klettke.us>
> > To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar>
> > Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org>
> > Sent: Wednesday, September 10, 2003 8:59 AM
> > Subject: Re: POSTROUTING & DNAT
> >
> >
> > > Is NAT support compiled into the kernel?
> > >
> > >
> > > On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote:
> > > > Sorry those are my rules (DMZ)
> > > >
> > > > HTTP
> > > > #
> > > > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT
\
> > > > --to-destination $IP_DMZ
> > > > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT
\
> > > > --to-source $IP_LAN
> > > > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \
> > > > --to-destination $IP_DMZ
> > > > #
> > > > #
> > > > #
> > > > work great with rh 7.1 kernel 2.4.17
> > > >
> > > >
> > > > ----- Original Message -----
> > > > From: "Leszek Zur" <lzur@record.com.pl>
> > > > To: <netfilter@lists.netfilter.org>
> > > > Sent: Thursday, May 22, 2003 10:01 AM
> > > > Subject: POSTROUTING & DNAT
> > > >
> > > >
> > > > > Hello
> > > > >
> > > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination
2.2.2.2
> > > > > iptables: Invalid argument
> > > > >
> > > > > Can anyone help me understand what is happening?
> > > > >
> > > > > iptables v1.2.8
> > > > > kernel 2.4.20
> > > > >
> > > > > thnx
> > > > >
> > > > > Leszek
> > > > >
> > > > >
> > > > >
> > > >
> > >
> >
>
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2003-09-11 21:35 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur
2003-09-10 3:19 ` Diego R. Rodriguez Herlein
2003-09-10 3:39 ` Diego R. Rodriguez Herlein
2003-09-10 11:59 ` Thomas Klettke
2003-09-10 21:55 ` Diego R. Rodriguez Herlein
2003-09-11 0:29 ` Thomas Klettke
2003-09-11 21:35 ` Diego R. Rodriguez Herlein
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox