From: "Ray Anderson" <rsa@rb-com.com>
To: 'arif' <djreef@yahoo.com>, netfilter@lists.netfilter.org
Subject: RE: identical scripts, 2 boxes, different behavior - what else should i look for?!
Date: Tue, 16 Mar 2004 11:31:14 -0800 [thread overview]
Message-ID: <004d01c40b8d$3f363d30$2405010a@rsa> (raw)
In-Reply-To: <20040316191101.41549.qmail@web10207.mail.yahoo.com>
Check the gateway on the internal machine you're trying to forward to.
Internal box a will only talk through 1 firewall at a time, or correct me if
I'm wrong.
Firewall1 , firewall 2
.
/|\
|
Box A
Gateway is
firewall 1
Incoming packet to internal box A through firewall 2 will not work because
box A tries to respond through firewall 1, not firewall 2.
Or did I completely misunderstand the question?
-=Ray
+-----------------------------------------------------------+
| | Ray Anderson |
| | | Systems Development Manager |
| | | 916.788.2444 (Office) |
| (O) | 916.798.9439 (Mobile) |
|X--------<_._>--------X | PRIDE Industries |
| (___) | rsa at prideindustries.com |
| | http://www.prideindustries.com |
+-----------------------------------------------------------+
It's the little things that cost you victories.
Group Captain Reade Tilley, RAF
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org] On Behalf Of arif
> Sent: Tuesday, March 16, 2004 11:11 AM
> To: netfilter@lists.netfilter.org
> Subject: identical scripts, 2 boxes, different behavior -
> what else should i look for?!
>
>
> ok, after being super frustrated trying to figure out
> why i can't forward ports properly, i decided to just
> take the script we currently are using on the soon to
> be old firewall, and load it onto the new one. It
> loaded fine, but I get different behavior with the two
> machines! I compared the rules line by line using
> iptables -L, and theyre identical. But I do not get
> forwarded to the internal hosts like I should, when I
> try with the new machine! The routing tables are
> identical also, and they both have the same kernel
> modules loaded... the original is a 2.4.20 precompiled
> redhat kernel, and the new one is 2.4.25 that i
> compiled myself - could it be something i am missing
> in the kernel?? or is there something else i should
> check? i have /proc/sys/net/ipv4/ip_forward set to 1
> of course.. i dont know what else to look for!!!
> HELP!!! :)
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Mail - More reliable, more storage, less spam
> http://mail.yahoo.com
>
next prev parent reply other threads:[~2004-03-16 19:31 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-03-16 19:11 identical scripts, 2 boxes, different behavior - what else should i look for?! arif
2004-03-16 19:31 ` Ray Anderson [this message]
2004-03-16 20:06 ` arif
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='004d01c40b8d$3f363d30$2405010a@rsa' \
--to=rsa@rb-com.com \
--cc=djreef@yahoo.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox