Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Andrew Beverley <andy@andybev.com>
To: benjamin fernandis <benjo11111@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: internet sharing issue
Date: Tue, 04 Jan 2011 18:41:29 +0000	[thread overview]
Message-ID: <1294166489.1620.17.camel@andybev> (raw)
In-Reply-To: <AANLkTik6WP-fKZK+a4x7E4r8vW10TLH+6=HSWp2MQvry@mail.gmail.com>

On Tue, 2011-01-04 at 08:45 +0530, benjamin fernandis wrote:
> Hi Friends,
> 
> I have rhel 5.5 on that i compiled kernel 2.6.36.2 and iptables 1.4.9 .
> 
> After that i configured basic internet sharing setings in iptables.
> 
> Iptables rule :
> [root@localhost ~]# iptables -L -nvx -t nat
> Chain PREROUTING (policy ACCEPT 9 packets, 1068 bytes)
>     pkts      bytes target     prot opt in     out     source
>      destination
> 
> Chain INPUT (policy ACCEPT 1 packets, 28 bytes)
>     pkts      bytes target     prot opt in     out     source
>      destination
> 
> Chain OUTPUT (policy ACCEPT 58 packets, 6477 bytes)
>     pkts      bytes target     prot opt in     out     source
>      destination
> 
> Chain POSTROUTING (policy ACCEPT 55 packets, 6225 bytes)
>     pkts      bytes target     prot opt in     out     source
>      destination
>        3      252 MASQUERADE  all  --  *      *       10.10.10.0/24
>     0.0.0.0/0
> [root@localhost ~]#
> 
> and also i enabled ip_forward.
> 
> net.ipv4.ip_forward = 1
> net.ipv4.conf.default.rp_filter = 0
> net.ipv4.conf.default.accept_source_route = 0
> kernel.sysrq = 0
> kernel.core_uses_pid = 1
> kernel.msgmnb = 65536
> kernel.msgmax = 65536
> kernel.shmmax = 4294967295
> kernel.shmall = 268435456
> 
> at my gateway internet is working fine.But from my client net is not working.
> 

You've only listed the nat table. What rules are in your mangle and
filter tables (in particular the FORWARD chain)?

Andy



      reply	other threads:[~2011-01-04 18:41 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-01-04  3:15 internet sharing issue benjamin fernandis
2011-01-04 18:41 ` Andrew Beverley [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1294166489.1620.17.camel@andybev \
    --to=andy@andybev.com \
    --cc=benjo11111@gmail.com \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox