From: Andrew Beverley <andy@andybev.com>
To: benjamin fernandis <benjo11111@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: internet sharing issue
Date: Tue, 04 Jan 2011 18:41:29 +0000 [thread overview]
Message-ID: <1294166489.1620.17.camel@andybev> (raw)
In-Reply-To: <AANLkTik6WP-fKZK+a4x7E4r8vW10TLH+6=HSWp2MQvry@mail.gmail.com>
On Tue, 2011-01-04 at 08:45 +0530, benjamin fernandis wrote:
> Hi Friends,
>
> I have rhel 5.5 on that i compiled kernel 2.6.36.2 and iptables 1.4.9 .
>
> After that i configured basic internet sharing setings in iptables.
>
> Iptables rule :
> [root@localhost ~]# iptables -L -nvx -t nat
> Chain PREROUTING (policy ACCEPT 9 packets, 1068 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Chain INPUT (policy ACCEPT 1 packets, 28 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Chain OUTPUT (policy ACCEPT 58 packets, 6477 bytes)
> pkts bytes target prot opt in out source
> destination
>
> Chain POSTROUTING (policy ACCEPT 55 packets, 6225 bytes)
> pkts bytes target prot opt in out source
> destination
> 3 252 MASQUERADE all -- * * 10.10.10.0/24
> 0.0.0.0/0
> [root@localhost ~]#
>
> and also i enabled ip_forward.
>
> net.ipv4.ip_forward = 1
> net.ipv4.conf.default.rp_filter = 0
> net.ipv4.conf.default.accept_source_route = 0
> kernel.sysrq = 0
> kernel.core_uses_pid = 1
> kernel.msgmnb = 65536
> kernel.msgmax = 65536
> kernel.shmmax = 4294967295
> kernel.shmall = 268435456
>
> at my gateway internet is working fine.But from my client net is not working.
>
You've only listed the nat table. What rules are in your mangle and
filter tables (in particular the FORWARD chain)?
Andy
prev parent reply other threads:[~2011-01-04 18:41 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-01-04 3:15 internet sharing issue benjamin fernandis
2011-01-04 18:41 ` Andrew Beverley [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1294166489.1620.17.camel@andybev \
--to=andy@andybev.com \
--cc=benjo11111@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox