Problems with SNAT in POSTROUTING

Problems with SNAT in POSTROUTING

[Copag]

With the new version of iptables, our script don't works. We have problems
with the SNAT in use of the POSTROUTING. With the old version, the problem
(with the same script) don't exists.

Anyone can help, please?

Sorry for the poor english.

Thanks.

Joao Paulo

Re: Problems with SNAT in POSTROUTING

[Unknown, Alistair Tonner]

On January 6, 2004 12:41 am, Copag wrote:
> With the new version of iptables, our script don't works. We have problems
> with the SNAT in use of the POSTROUTING. With the old version, the problem
> (with the same script) don't exists.

	When you say "new version of iptables" do you mean you installed new 
	userspace tools, or have you simply moved to a new version of Patch-O-Matic
	iptables kernel patches, or further, have you upgraded your kernel and patched
	in a new version of patch-o-matic?

	*IF* you have upgraded patch-o-matic and kernel, you lkely need to rebuild your
	userspace tools.... I recently moved from 2.4.23 to 2.6.0 and more recent patch-o-matic
	and found that to get SNAT working I had to rebuild userspace tools.

	Alistair Tonner
	

>
> Anyone can help, please?
>
> Sorry for the poor english.
>
> Thanks.
>
> Joao Paulo

Re: Problems with SNAT in POSTROUTING

[Copag]

Sorry. I was in my house, now I'm at work.


> 	When you say "new version of iptables" do you mean
> you installed new 
> 	userspace tools, or have you simply moved to a new
> version of Patch-O-Matic
> 	iptables kernel patches, or further, have you
> upgraded your kernel and patched
> 	in a new version of patch-o-matic?

We installed the new version of iptables only in the
iptables version (1.2.28 to 1.2.29), with no changes
in the kernel or Patch-O-Matic.


> 
> 	*IF* you have upgraded patch-o-matic and kernel,
> you lkely need to rebuild your
> 	userspace tools.... I recently moved from 2.4.23 to
> 2.6.0 and more recent patch-o-matic
> 	and found that to get SNAT working I had to rebuild
> userspace tools.
> 

What is the "userspace tools"? What can I rebuild this
to test?

Thanks a lot.


Joao Paulo



______________________________________________________________________

Conheça a nova central de informações anti-spam do Yahoo! Mail:
http://www.yahoo.com.br/antispam

Re: Problems with SNAT in POSTROUTING

[Antony Stone]

On Tuesday 06 January 2004 3:48 pm, Copag wrote:

> Sorry. I was in my house, now I'm at work.
>
> > 	When you say "new version of iptables" do you mean
> > you installed new
> > 	userspace tools, or have you simply moved to a new
> > version of Patch-O-Matic
> > 	iptables kernel patches, or further, have you
> > upgraded your kernel and patched
> > 	in a new version of patch-o-matic?
>
> We installed the new version of iptables only in the
> iptables version (1.2.28 to 1.2.29), with no changes
> in the kernel or Patch-O-Matic.
>
> > 	*IF* you have upgraded patch-o-matic and kernel,
> > you lkely need to rebuild your
> > 	userspace tools.... I recently moved from 2.4.23 to
> > 2.6.0 and more recent patch-o-matic
> > 	and found that to get SNAT working I had to rebuild
> > userspace tools.
>
> What is the "userspace tools"? What can I rebuild this
> to test?

iptables (ie: the command you use as a user) is the userspace tool, and 
netfilter is the kernel part which does the filter according the rules 
configured by iptables.

Since you say you have installed the new version of iptables, this is the 
userspace tools - have you also upgraded the kernel (containing netfilter) to 
match it?

Antony.

-- 
The truth is rarely pure, and never simple.

 - Oscar Wilde

                                                     Please reply to the list;
                                                           please don't CC me.

Re: Problems with SNAT in POSTROUTING

[Unknown, Alistair Tonner]

On January 6, 2004 10:48 am, Copag wrote:
> Sorry. I was in my house, now I'm at work.
>
> > 	When you say "new version of iptables" do you mean
> > you installed new
> > 	userspace tools, or have you simply moved to a new
> > version of Patch-O-Matic
> > 	iptables kernel patches, or further, have you
> > upgraded your kernel and patched
> > 	in a new version of patch-o-matic?
>
> We installed the new version of iptables only in the
> iptables version (1.2.28 to 1.2.29), with no changes
> in the kernel or Patch-O-Matic.
>

	Here is your problem.   If you change versions of netfilter you need 
	to put those changes into your kernel -- i.e. -- rebuild the kernel.
	That makes it a good time to upgrade patch-o-matic if you use anything
	out of it.


> > 	*IF* you have upgraded patch-o-matic and kernel,
> > you lkely need to rebuild your
> > 	userspace tools.... I recently moved from 2.4.23 to
> > 2.6.0 and more recent patch-o-matic
> > 	and found that to get SNAT working I had to rebuild
> > userspace tools.
>
> What is the "userspace tools"? What can I rebuild this
> to test?
>
> Thanks a lot.
>
>
> Joao Paulo
>
>
>
> ______________________________________________________________________
>
> Conheça a nova central de informações anti-spam do Yahoo! Mail:
> http://www.yahoo.com.br/antispam