From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ralf Spenneberg Subject: Re: Iptables and Zebra Date: 16 Dec 2003 12:06:32 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1071572792.1688.12.camel@kermit> References: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1" To: Bertrand TACHAGO Cc: Netfilter Am Die, 2003-12-16 um 10.34 schrieb Bertrand TACHAGO: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm > blocked because there's a firewall (iptables) problem. I had entered a > POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j > MASQUERADE) but the packets are not routed to the external interface. > Can somebody help me solve this problem (use zebra routing protocol to > route packets from my network to the Internet)? Why are you trying to setup zebra?=20 If you just want the Linux box to operate as a simple router between two networks, remove zebra, activate forwarding and masquerading and you are done. Forwarding: sysctl -w net.ipv4.ip_forward=3D1 The needed static routes are usually set automatically as soon as the interfaces are initialized. > =20 Cheers, Ralf --=20 Ralf Spenneberg RHCE, RHCX Book: VPN mit Linux Book: Intrusion Detection f=FCr Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org