From: "Bertrand TACHAGO" <btachago@creolink.net>
To: Ralf Spenneberg <lists@spenneberg.org>
Cc: netfilter@lists.netfilter.org
Subject: Re: Iptables and Zebra
Date: Tue, 16 Dec 2003 12:58:29 +0100 [thread overview]
Message-ID: <007501c3c3cb$ed17c040$220aa8c0@BERTRAND> (raw)
In-Reply-To: 1071572792.1688.12.camel@kermit
Bertrand TACHAGO
Computer specialist / Network administrator
Cellular: (237) 975 55 31
----- Original Message -----
From: "Ralf Spenneberg" <lists@spenneberg.org>
To: "Bertrand TACHAGO" <btachago@creolink.net>
Cc: "Netfilter" <netfilter@lists.netfilter.org>
Sent: Tuesday, December 16, 2003 12:06 PM
Subject: Re: Iptables and Zebra
Am Die, 2003-12-16 um 10.34 schrieb Bertrand TACHAGO:
> Hi to all!
> I'm trying to setup a zebra router on a RH9 machine but right I'm
> blocked because there's a firewall (iptables) problem. I had entered a
> POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j
> MASQUERADE) but the packets are not routed to the external interface.
> Can somebody help me solve this problem (use zebra routing protocol to
> route packets from my network to the Internet)?
Why are you trying to setup zebra?
If you just want the Linux box to operate as a simple router between two
networks, remove zebra, activate forwarding and masquerading and you are
done.
Forwarding:
sysctl -w net.ipv4.ip_forward=1
The needed static routes are usually set automatically as soon as the
interfaces are initialized.
>
Cheers,
Ralf
--
Ralf Spenneberg
RHCE, RHCX
Book: VPN mit Linux
Book: Intrusion Detection für Linux Server http://www.spenneberg.com
IPsec-Howto http://www.ipsec-howto.org
Honeynet Project Mirror: http://honeynet.spenneberg.org
I'm trying to setup zebra because I have 3 subnets with 3 linux boxes
configured as router with zebra and ospfd. Maybe if I activate Masquerading,
it would work.
Cheers,
prev parent reply other threads:[~2003-12-16 11:58 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-12-16 9:34 Iptables and Zebra Bertrand TACHAGO
2003-12-16 10:21 ` Antony Stone
2003-12-16 11:06 ` Ralf Spenneberg
2003-12-16 11:58 ` Bertrand TACHAGO [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='007501c3c3cb$ed17c040$220aa8c0@BERTRAND' \
--to=btachago@creolink.net \
--cc=lists@spenneberg.org \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox