From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Bertrand TACHAGO" Subject: Iptables and Zebra Date: Tue, 16 Dec 2003 10:34:59 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0060_01C3C3C0.4166D020" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0060_01C3C3C0.4166D020 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi to all! I'm trying to setup a zebra router on a RH9 machine but right I'm = blocked because there's a firewall (iptables) problem. I had entered a = POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE) = but the packets are not routed to the external interface. Can somebody = help me solve this problem (use zebra routing protocol to route packets = from my network to the Internet)? Bertrand TACHAGO Computer specialist / Network administrator Cellular: (237) 975 55 31 ------=_NextPart_000_0060_01C3C3C0.4166D020 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hi to all!
I'm trying to setup a zebra router on a = RH9 machine=20 but right I'm blocked because there's a firewall (iptables) problem. I = had=20 entered a POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j=20 MASQUERADE) but the packets are not routed to the external interface. = Can=20 somebody help me solve this problem (use zebra routing protocol to route = packets=20 from my network to the Internet)?
 
Bertrand TACHAGO
Computer specialist = / Network=20 administrator
Cellular: (237) 975 55 31
------=_NextPart_000_0060_01C3C3C0.4166D020-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Antony Stone Subject: Re: Iptables and Zebra Date: Tue, 16 Dec 2003 10:21:14 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200312161021.14594.Antony@Soft-Solutions.co.uk> References: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Tuesday 16 December 2003 9:34 am, Bertrand TACHAGO wrote: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm blocked > because there's a firewall (iptables) problem. I had entered a POSTROUTING > rule (iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE) but the packets > are not routed to the external interface. Can somebody help me solve this > problem (use zebra routing protocol to route packets from my network to the > Internet)? Netfilter does not route packets for you. It can change the source or destination addresses, and it can block certain packets from being routed, but the decision about where / how / why to route packets is not made by netfilter. The rule you have given above will make sure that all packets leaving interface eth0 will have the IP address of that interface as their source address. It does not affect in any way which packets get routed via eth0 on their way anywhere else. Sorry I can't be more help, but I wanted to make sure you understood that a routing problem is not a netfilter problem. Antony. -- The difference between theory and practice is that in theory there is no difference, whereas in practice there is. Please reply to the list; please don't CC me. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ralf Spenneberg Subject: Re: Iptables and Zebra Date: 16 Dec 2003 12:06:32 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1071572792.1688.12.camel@kermit> References: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1" To: Bertrand TACHAGO Cc: Netfilter Am Die, 2003-12-16 um 10.34 schrieb Bertrand TACHAGO: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm > blocked because there's a firewall (iptables) problem. I had entered a > POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j > MASQUERADE) but the packets are not routed to the external interface. > Can somebody help me solve this problem (use zebra routing protocol to > route packets from my network to the Internet)? Why are you trying to setup zebra?=20 If you just want the Linux box to operate as a simple router between two networks, remove zebra, activate forwarding and masquerading and you are done. Forwarding: sysctl -w net.ipv4.ip_forward=3D1 The needed static routes are usually set automatically as soon as the interfaces are initialized. > =20 Cheers, Ralf --=20 Ralf Spenneberg RHCE, RHCX Book: VPN mit Linux Book: Intrusion Detection f=FCr Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Bertrand TACHAGO" Subject: Re: Iptables and Zebra Date: Tue, 16 Dec 2003 12:58:29 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <007501c3c3cb$ed17c040$220aa8c0@BERTRAND> References: <006301c3c3b7$e02ef0b0$220aa8c0@BERTRAND> <1071572792.1688.12.camel@kermit> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1" To: Ralf Spenneberg Cc: netfilter@lists.netfilter.org Bertrand TACHAGO Computer specialist / Network administrator Cellular: (237) 975 55 31 ----- Original Message -----=20 From: "Ralf Spenneberg" To: "Bertrand TACHAGO" Cc: "Netfilter" Sent: Tuesday, December 16, 2003 12:06 PM Subject: Re: Iptables and Zebra Am Die, 2003-12-16 um 10.34 schrieb Bertrand TACHAGO: > Hi to all! > I'm trying to setup a zebra router on a RH9 machine but right I'm > blocked because there's a firewall (iptables) problem. I had entered a > POSTROUTING rule (iptables -t nat -A POSTROUTING -o eth0 -j > MASQUERADE) but the packets are not routed to the external interface. > Can somebody help me solve this problem (use zebra routing protocol to > route packets from my network to the Internet)? Why are you trying to setup zebra? If you just want the Linux box to operate as a simple router between two networks, remove zebra, activate forwarding and masquerading and you are done. Forwarding: sysctl -w net.ipv4.ip_forward=3D1 The needed static routes are usually set automatically as soon as the interfaces are initialized. > Cheers, Ralf --=20 Ralf Spenneberg RHCE, RHCX Book: VPN mit Linux Book: Intrusion Detection f=FCr Linux Server http://www.spenneberg.com IPsec-Howto http://www.ipsec-howto.org Honeynet Project Mirror: http://honeynet.spenneberg.org I'm trying to setup zebra because I have 3 subnets with 3 linux boxes configured as router with zebra and ospfd. Maybe if I activate Masquerading, it would work. Cheers,