Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Jan Kaastrup" <jka@protego.dk>
To: 'netfilter' <netfilter@lists.netfilter.org>
Subject: Iptables and SNAT
Date: Tue, 17 Feb 2004 11:18:56 +0100	[thread overview]
Message-ID: <004d01c3f53f$73685cf0$2d64a8c0@pcjka> (raw)
In-Reply-To: <1077000917.9435.6.camel@ssatchell1.pyramid.net>

Hi list
After a reboot of my RedHat mashine, the NAT part of Iptables stop
working.

I get: "iptables: Invalid argument" when using snat.

My snat rule look like this:
$IPTABLES -t nat -A POSTROUTING -o $EXT_INT -j SNAT --to-source $EXT_IP

I have made all netfilter stuff as modules.
#lsmod
ip_conntrack_irc        4336   1  (autoclean)
ip_nat_irc              3440   0  (unused)
ip_conntrack_ftp        5520   1  (autoclean)
ip_nat_ftp              4240   0  (unused)
ipt_ah                  1080   0  (unused)
ipt_esp                 1112   0  (unused)
iptable_nat            22040   2  [ip_nat_irc ip_nat_ftp]
ppp_mppe               24088   0  (autoclean)
bsd_comp                5464   0  (autoclean)
ppp_async               9440   0  (autoclean)
ppp_generic            24508   0  (autoclean) [ppp_mppe bsd_comp
ppp_async]
slhc                    6740   0  (autoclean) [ppp_generic]
ipt_LOG                 4152   1  (autoclean)
ipt_REJECT              4024   1  (autoclean)
ipt_state               1048   5  (autoclean)
iptable_mangle          2776   0  (autoclean) (unused)
ip_conntrack           28296   4  (autoclean) [ip_conntrack_irc
ip_nat_irc ip_conntrack_ftp ip_nat_ftp iptable_nat ipt_state]
iptable_filter          2412   1  (autoclean)
ip_tables              14872  10  [ipt_ah ipt_esp iptable_nat ipt_LOG
ipt_REJECT ipt_state iptable_mangle iptable_filter]

Any hints???

I have tried to recompile iptables - but nothing seems to work - I know
it did before the reboot.
Only thing that has been changed is a static route being enabled, but
this shouldn't make iptables complain:(

Thanks a lot



  reply	other threads:[~2004-02-17 10:18 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-02-17 21:12 Iptables and bridge Adi
2004-02-17  6:55 ` Stephen Satchell
2004-02-17 10:18   ` Jan Kaastrup [this message]
2004-02-17 10:57     ` Iptables and SNAT Mark Vevers
     [not found] <95ac437a-3f19-490a-80d0-3ce0a20850ed@y10g2000prg.googlegroups.com>
     [not found] ` <46ee7b1c0910212155pd99519cw9831d4bb7d7f3064@mail.gmail.com>
     [not found]   ` <b8dec168-132d-4fba-9d09-fbb5554c339d@m7g2000prd.googlegroups.com>
2009-10-27  5:08     ` IPtables " codingfreak
2009-10-27  9:03       ` Richard Horton
     [not found] <200402171428.52966.mark@vevers.net>
2004-02-17 14:39 ` Iptables " Jan Kaastrup

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='004d01c3f53f$73685cf0$2d64a8c0@pcjka' \
    --to=jka@protego.dk \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox