* POSTROUTING & DNAT @ 2003-05-22 13:01 Leszek Zur 2003-09-10 3:19 ` Diego R. Rodriguez Herlein 2003-09-10 3:39 ` Diego R. Rodriguez Herlein 0 siblings, 2 replies; 7+ messages in thread From: Leszek Zur @ 2003-05-22 13:01 UTC (permalink / raw) To: netfilter Hello iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 iptables: Invalid argument Can anyone help me understand what is happening? iptables v1.2.8 kernel 2.4.20 thnx Leszek ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur @ 2003-09-10 3:19 ` Diego R. Rodriguez Herlein 2003-09-10 3:39 ` Diego R. Rodriguez Herlein 1 sibling, 0 replies; 7+ messages in thread From: Diego R. Rodriguez Herlein @ 2003-09-10 3:19 UTC (permalink / raw) To: Leszek Zur, netfilter I have the some problem with rh 8, kernel 2.4.20 iptables 1.2.7a Can anyone help me ??? Regards Diego ----- Original Message ----- From: "Leszek Zur" <lzur@record.com.pl> To: <netfilter@lists.netfilter.org> Sent: Thursday, May 22, 2003 10:01 AM Subject: POSTROUTING & DNAT > Hello > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > iptables: Invalid argument > > Can anyone help me understand what is happening? > > iptables v1.2.8 > kernel 2.4.20 > > thnx > > Leszek > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur 2003-09-10 3:19 ` Diego R. Rodriguez Herlein @ 2003-09-10 3:39 ` Diego R. Rodriguez Herlein 2003-09-10 11:59 ` Thomas Klettke 1 sibling, 1 reply; 7+ messages in thread From: Diego R. Rodriguez Herlein @ 2003-09-10 3:39 UTC (permalink / raw) To: Leszek Zur, netfilter Sorry those are my rules (DMZ) HTTP # iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ --to-destination $IP_DMZ iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ --to-source $IP_LAN iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ --to-destination $IP_DMZ # # # work great with rh 7.1 kernel 2.4.17 ----- Original Message ----- From: "Leszek Zur" <lzur@record.com.pl> To: <netfilter@lists.netfilter.org> Sent: Thursday, May 22, 2003 10:01 AM Subject: POSTROUTING & DNAT > Hello > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > iptables: Invalid argument > > Can anyone help me understand what is happening? > > iptables v1.2.8 > kernel 2.4.20 > > thnx > > Leszek > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-09-10 3:39 ` Diego R. Rodriguez Herlein @ 2003-09-10 11:59 ` Thomas Klettke 2003-09-10 21:55 ` Diego R. Rodriguez Herlein 0 siblings, 1 reply; 7+ messages in thread From: Thomas Klettke @ 2003-09-10 11:59 UTC (permalink / raw) To: Diego R. Rodriguez Herlein; +Cc: Leszek Zur, netfilter Is NAT support compiled into the kernel? On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote: > Sorry those are my rules (DMZ) > > HTTP > # > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ > --to-destination $IP_DMZ > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ > --to-source $IP_LAN > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ > --to-destination $IP_DMZ > # > # > # > work great with rh 7.1 kernel 2.4.17 > > > ----- Original Message ----- > From: "Leszek Zur" <lzur@record.com.pl> > To: <netfilter@lists.netfilter.org> > Sent: Thursday, May 22, 2003 10:01 AM > Subject: POSTROUTING & DNAT > > > > Hello > > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > > iptables: Invalid argument > > > > Can anyone help me understand what is happening? > > > > iptables v1.2.8 > > kernel 2.4.20 > > > > thnx > > > > Leszek > > > > > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-09-10 11:59 ` Thomas Klettke @ 2003-09-10 21:55 ` Diego R. Rodriguez Herlein 2003-09-11 0:29 ` Thomas Klettke 0 siblings, 1 reply; 7+ messages in thread From: Diego R. Rodriguez Herlein @ 2003-09-10 21:55 UTC (permalink / raw) To: Thomas Klettke; +Cc: Leszek Zur, netfilter nop like module ... I am really lost about it Thank you for your answer! Regards, Diego PD Sorry about my english ----- Original Message ----- From: "Thomas Klettke" <thomas@klettke.us> To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar> Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org> Sent: Wednesday, September 10, 2003 8:59 AM Subject: Re: POSTROUTING & DNAT > Is NAT support compiled into the kernel? > > > On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote: > > Sorry those are my rules (DMZ) > > > > HTTP > > # > > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > --to-destination $IP_DMZ > > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ > > --to-source $IP_LAN > > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > --to-destination $IP_DMZ > > # > > # > > # > > work great with rh 7.1 kernel 2.4.17 > > > > > > ----- Original Message ----- > > From: "Leszek Zur" <lzur@record.com.pl> > > To: <netfilter@lists.netfilter.org> > > Sent: Thursday, May 22, 2003 10:01 AM > > Subject: POSTROUTING & DNAT > > > > > > > Hello > > > > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > > > iptables: Invalid argument > > > > > > Can anyone help me understand what is happening? > > > > > > iptables v1.2.8 > > > kernel 2.4.20 > > > > > > thnx > > > > > > Leszek > > > > > > > > > > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-09-10 21:55 ` Diego R. Rodriguez Herlein @ 2003-09-11 0:29 ` Thomas Klettke 2003-09-11 21:35 ` Diego R. Rodriguez Herlein 0 siblings, 1 reply; 7+ messages in thread From: Thomas Klettke @ 2003-09-11 0:29 UTC (permalink / raw) To: Diego R. Rodriguez Herlein; +Cc: Leszek Zur, netfilter Diego, I'm not quite sure about your answer, I understand from it this: You do not have NAT support compiled into your kernel. You have it compiled as a kernel module though. Is this correct? On Wed, 2003-09-10 at 16:55, Diego R. Rodriguez Herlein wrote: > nop > like module ... > I am really lost about it > Thank you for your answer! > Regards, > > Diego > > PD Sorry about my english > ----- Original Message ----- > From: "Thomas Klettke" <thomas@klettke.us> > To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar> > Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org> > Sent: Wednesday, September 10, 2003 8:59 AM > Subject: Re: POSTROUTING & DNAT > > > > Is NAT support compiled into the kernel? > > > > > > On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote: > > > Sorry those are my rules (DMZ) > > > > > > HTTP > > > # > > > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > > --to-destination $IP_DMZ > > > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ > > > --to-source $IP_LAN > > > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > > --to-destination $IP_DMZ > > > # > > > # > > > # > > > work great with rh 7.1 kernel 2.4.17 > > > > > > > > > ----- Original Message ----- > > > From: "Leszek Zur" <lzur@record.com.pl> > > > To: <netfilter@lists.netfilter.org> > > > Sent: Thursday, May 22, 2003 10:01 AM > > > Subject: POSTROUTING & DNAT > > > > > > > > > > Hello > > > > > > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > > > > iptables: Invalid argument > > > > > > > > Can anyone help me understand what is happening? > > > > > > > > iptables v1.2.8 > > > > kernel 2.4.20 > > > > > > > > thnx > > > > > > > > Leszek > > > > > > > > > > > > > > > > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: POSTROUTING & DNAT 2003-09-11 0:29 ` Thomas Klettke @ 2003-09-11 21:35 ` Diego R. Rodriguez Herlein 0 siblings, 0 replies; 7+ messages in thread From: Diego R. Rodriguez Herlein @ 2003-09-11 21:35 UTC (permalink / raw) To: Thomas Klettke; +Cc: Leszek Zur, netfilter yes, sorry about my english .. I have nat compiled as kernel module ... I found the problem I fix it ... I must compile the kernel with this ... Networking options ---> IP: Netfilter Configuration --->[*] NAT of local connections (READ HELP) When I include this the rule of the output chain was accept I hope this help anyone. Again sorry about my english y thanks for all Best regards, Diego ----- Original Message ----- From: "Thomas Klettke" <thomas@klettke.us> To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar> Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org> Sent: Wednesday, September 10, 2003 9:29 PM Subject: Re: POSTROUTING & DNAT > Diego, > I'm not quite sure about your answer, I understand from it this: > > You do not have NAT support compiled into your kernel. > You have it compiled as a kernel module though. > > Is this correct? > > > > > On Wed, 2003-09-10 at 16:55, Diego R. Rodriguez Herlein wrote: > > nop > > like module ... > > I am really lost about it > > Thank you for your answer! > > Regards, > > > > Diego > > > > PD Sorry about my english > > ----- Original Message ----- > > From: "Thomas Klettke" <thomas@klettke.us> > > To: "Diego R. Rodriguez Herlein" <diegorh@infovia.com.ar> > > Cc: "Leszek Zur" <lzur@record.com.pl>; <netfilter@lists.netfilter.org> > > Sent: Wednesday, September 10, 2003 8:59 AM > > Subject: Re: POSTROUTING & DNAT > > > > > > > Is NAT support compiled into the kernel? > > > > > > > > > On Tue, 2003-09-09 at 22:39, Diego R. Rodriguez Herlein wrote: > > > > Sorry those are my rules (DMZ) > > > > > > > > HTTP > > > > # > > > > iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > > > --to-destination $IP_DMZ > > > > iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ > > > > --to-source $IP_LAN > > > > iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ > > > > --to-destination $IP_DMZ > > > > # > > > > # > > > > # > > > > work great with rh 7.1 kernel 2.4.17 > > > > > > > > > > > > ----- Original Message ----- > > > > From: "Leszek Zur" <lzur@record.com.pl> > > > > To: <netfilter@lists.netfilter.org> > > > > Sent: Thursday, May 22, 2003 10:01 AM > > > > Subject: POSTROUTING & DNAT > > > > > > > > > > > > > Hello > > > > > > > > > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > > > > > iptables: Invalid argument > > > > > > > > > > Can anyone help me understand what is happening? > > > > > > > > > > iptables v1.2.8 > > > > > kernel 2.4.20 > > > > > > > > > > thnx > > > > > > > > > > Leszek > > > > > > > > > > > > > > > > > > > > > > > > > ^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2003-09-11 21:35 UTC | newest] Thread overview: 7+ messages (download: mbox.gz follow: Atom feed -- links below jump to the message on this page -- 2003-05-22 13:01 POSTROUTING & DNAT Leszek Zur 2003-09-10 3:19 ` Diego R. Rodriguez Herlein 2003-09-10 3:39 ` Diego R. Rodriguez Herlein 2003-09-10 11:59 ` Thomas Klettke 2003-09-10 21:55 ` Diego R. Rodriguez Herlein 2003-09-11 0:29 ` Thomas Klettke 2003-09-11 21:35 ` Diego R. Rodriguez Herlein
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox