From: Alexis <alexis@attla.net.ar>
To: Richard Bown <richard.bown@blueyonder.co.uk>
Cc: 'netfilter' <netfilter@lists.netfilter.org>
Subject: Re: kernel2.6.2-3 + iptables/shorewall
Date: Thu, 19 Feb 2004 12:21:34 -0300 [thread overview]
Message-ID: <1077204094.1573.20.camel@pepelui.baicom> (raw)
In-Reply-To: <1077203446.4311.28.camel@gb7tf.org.uk>
On Thu, 2004-02-19 at 12:10, Richard Bown wrote:
> Thanks Alexis
>
>
> On Thu, 2004-02-19 at 15:01, Alexis wrote:
> > Yes, i have at least 4 firewalls running SNAT and DNAT with 2.6.2 and
> > iptables 1.2.9 without any problem. (using redhat 8,9 or debian)
> Are you masquerading as well ?
No, i dont because all are fixed ip pools that the provideres give me
> I'm getting suspicious this could be a mandrake thing, as the lib
> iptables is split in to two sections , vanilla and mandrake depending on
> whether a 2.4 or 2.6 kernel is used a sym link points at the libs.
I dont know mandrake ive never used, my choice is always the same,
debian.
But some customers asks for redhat so "the customer is always right" :)
> > IP forwarding could be enabled and disabled at
> >
> > /proc/sys/net/ipv4/ip_forward if this is your question
>
> this is set to 1, so enabled
yes it is, wich is the policy for the FORWARD chain?
> Richard
> >
> >
> > On Thu, 2004-02-19 at 11:48, Richard Bown wrote:
> > > Hi
> > > having a real headach with this
> > > Running kernel-2.6.2-3mdk patched for win4lin
> > > iptables 1.2.9-5mdk
> > > shorewall 1.4.8-3mdk
> > > modules loaded are :-
> > > ipt_TOS 2240 0 - Live 0xe197f000
> > > ipt_REJECT 6464 0 - Live 0xe198e000
> > > ipt_LOG 5312 0 - Live 0xe198b000
> > > ipt_state 1728 2 - Live 0xe1985000
> > > ipt_multiport 1856 0 - Live 0xe1983000
> > > ipt_conntrack 2304 0 - Live 0xe1981000
> > > iptable_filter 2624 1 - Live 0xe1932000
> > > iptable_mangle 2624 0 - Live 0xe18d2000
> > > iptable_nat 23116 1 ipt_MASQUERADE, Live 0xe18c3000
> > > ip_conntrack 31120 4 ipt_MASQUERADE,ipt_state,ipt_conntrack,iptable_nat,
> > > Live 0xe1963000
> > > ip_tables 16704 10
> > > ipt_MASQUERADE,ipt_TOS,ipt_REJECT,ipt_LOG,ipt_state,ipt_multiport,ipt_conntrack,iptable_filter,iptable_mangle,iptable_nat, Live 0xe1952000
> > >
> > >
> > > now in the 2.4 series kernels if I remember right you could turn /off
> > > IPV4 forwarding, I hav'nt found this at all in the config file on a
> > > 2.6.2 kernel.
> > > So as you guys are more at the iptables end, is anyone successfully
> > > getting MASQ,& DNAT functional with a 2.6.2 kernel, and maybe on a
> > > mandrake system :)
> > >
> > > Thanks
> > > Richard
--
Alexis <alexis@attla.net.ar>
next prev parent reply other threads:[~2004-02-19 15:21 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-19 14:48 kernel2.6.2-3 + iptables/shorewall Richard Bown
2004-02-19 15:01 ` Alexis
2004-02-19 15:10 ` Richard Bown
2004-02-19 15:21 ` Alexis [this message]
2004-02-19 15:22 ` Tom Eastep
2004-02-19 15:07 ` Tom Eastep
2004-02-19 15:29 ` Tom Eastep
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1077204094.1573.20.camel@pepelui.baicom \
--to=alexis@attla.net.ar \
--cc=netfilter@lists.netfilter.org \
--cc=richard.bown@blueyonder.co.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox