From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Tim" Subject: FORWARD not working Date: Sat, 15 Feb 2003 19:50:17 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0005_01C2D52B.772D6950" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: iptables-list This is a multi-part message in MIME format. ------=_NextPart_000_0005_01C2D52B.772D6950 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable ppl, I rebuilt my box and can't seem to FORWARD anything. The same rules that = were working with the old box into the new box and its not working. Did = I miss anything. Cannot traverse the chains...I ran the command lsmod to check to make = sure the modules where loading correctly and did notice something that = was not there in my old box. ppp_syntty, ppp_async, ppp_generic and slhc = which states it is a generic ppp along with jbd which I never noticed = before. I anyone can point me to any reason or documentation why this is so, I = would gratefully appreciate it. Thanks Tim ------=_NextPart_000_0005_01C2D52B.772D6950 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
ppl,
 
I rebuilt my box and can't seem to = FORWARD=20 anything. The same rules that were working with the old box into the new = box and=20 its not working. Did I miss anything.
 
Cannot traverse the chains...I ran the = command=20 lsmod to check to make sure the modules where loading correctly and did = notice=20 something that was not there in my old box. ppp_syntty, ppp_async, = ppp_generic=20 and slhc which states it is a generic ppp along with jbd which I never = noticed=20 before.
 
I anyone can point me to any reason or=20 documentation why this is so, I would gratefully appreciate=20 it.
 
Thanks
Tim
------=_NextPart_000_0005_01C2D52B.772D6950-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arnt Karlsen Subject: Re: FORWARD not working Date: Sun, 16 Feb 2003 03:24:00 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20030216032400.3448ea9e.arnt@c2i.net> References: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org On Sat, 15 Feb 2003 19:50:17 -0500, "Tim" wrote in message <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza>: > ppl, > > I rebuilt my box and can't seem to FORWARD anything. The same rules > that were working with the old box into the new box and its not > working. Did I miss anything. ..compare 'cat /proc/sys/net/ipv4/ip_forward'... -- ..med vennlig hilsen = with Kind Regards from Arnt... ;-) ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. From mboxrd@z Thu Jan 1 00:00:00 1970 From: Joel Newkirk Subject: Re: FORWARD not working Date: Sat, 15 Feb 2003 21:32:06 -0500 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200302152132.06432.netfilter@newkirk.us> References: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Reply-To: netfilter@newkirk.us Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Tim , iptables-list On Saturday 15 February 2003 07:50 pm, Tim wrote: > ppl, > > I rebuilt my box and can't seem to FORWARD anything. The same rules > that were working with the old box into the new box and its not > working. Did I miss anything. > > Cannot traverse the chains...I ran the command lsmod to check to make > sure the modules where loading correctly and did notice something that > was not there in my old box. ppp_syntty, ppp_async, ppp_generic and > slhc which states it is a generic ppp along with jbd which I never > noticed before. > > I anyone can point me to any reason or documentation why this is so, I > would gratefully appreciate it. > > Thanks > Tim 1- Try "cat /proc/sys/net/ipv4/ip_forward" and see what it says. If it's= =20 a '0' (zero), then you need to "echo 1 >/proc/sys/net/ipv4/ip_forward"=20 to enable forwarding. 2- Ensure that the interfaces are the same as on the old box, IE if eth0=20 was internal network on the old box, then double-check that it's the=20 same on the new box. If not, you can either change your rules to=20 reflect the difference, or change what cable is plugged into which NIC. 3- Check "/sbin/iptables -v -n -L" and "/sbin/iptables -v -n -L nat" and=20 see if ANY rules, or chain policies (especially nat-PREROUTING, earliest=20 hit of those listed) reports any packets. 4- If the first two aren't the problem, then: If the third shows NO=20 traffic at all, your problem isn't iptables. If the third shows=20 traffic, try to see what rules and what chains the traffic is appearing=20 in, and make sense of it. Try inserting "-j LOG" rules as first in each=20 chain for a minute or two and check the logs to track packet traversals. 5- Also confirm whether the firewall box itself is able to communicate in= =20 each direction. At the minimum, you should ping a machine out each=20 interface. Set INPUT and OUTPUT chains to ACCEPT policy and no rules=20 if necessary, but try to narrow down where the problem really exists. 6- Check "ip route" and "ifconfig" and ensure your interfaces are all up,= =20 and you have appropriate routes. Routes should look something like=20 this: (eth0 is the interface ppp0 subsumes, eth1 is LAN) 10.10.21.1 dev ppp0 proto kernel scope link src 141.150.238.220=20 192.168.0.0/16 dev eth1 scope link=20 127.0.0.0/8 dev lo scope link=20 default via 10.10.21.1 dev ppp0=20 6- If all this turns up no answer, then post with a bit more detail, such= =20 as what distribution you were/are running, what version, what kernel,=20 and what version of iptables you were/are running. =20 j From mboxrd@z Thu Jan 1 00:00:00 1970 From: "..." Subject: Re: FORWARD not working Date: Mon, 17 Feb 2003 10:32:57 -0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <001d01c2d689$16020550$0a01a8c0@rlourenco> References: <000801c2d555$61c7dda0$0a0110ac@nebuchadnezza> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_001A_01C2D66F.F0222A40" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Tim , iptables-list This is a multi-part message in MIME format. ------=_NextPart_000_001A_01C2D66F.F0222A40 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable did you tried to set: echo "1" > /proc/sys/net/ipv4/ip_forward ... ----- Original Message -----=20 From: Tim=20 To: iptables-list=20 Sent: Saturday, February 15, 2003 9:50 PM Subject: FORWARD not working ppl, =20 I rebuilt my box and can't seem to FORWARD anything. The same rules = that were working with the old box into the new box and its not working. = Did I miss anything. =20 Cannot traverse the chains...I ran the command lsmod to check to make = sure the modules where loading correctly and did notice something that = was not there in my old box. ppp_syntty, ppp_async, ppp_generic and slhc = which states it is a generic ppp along with jbd which I never noticed = before. =20 I anyone can point me to any reason or documentation why this is so, I = would gratefully appreciate it. =20 Thanks Tim ------=_NextPart_000_001A_01C2D66F.F0222A40 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
did you tried to set:
 
echo "1" >=20 /proc/sys/net/ipv4/ip_forward
 
...
----- Original Message -----
From:=20 Tim =
To: iptables-list
Sent: Saturday, February 15, = 2003 9:50=20 PM
Subject: FORWARD not = working

ppl,
 
I rebuilt my box and can't seem to = FORWARD=20 anything. The same rules that were working with the old box into the = new box=20 and its not working. Did I miss anything.
 
Cannot traverse the chains...I ran = the command=20 lsmod to check to make sure the modules where loading correctly and = did notice=20 something that was not there in my old box. ppp_syntty, ppp_async, = ppp_generic=20 and slhc which states it is a generic ppp along with jbd which I never = noticed=20 before.
 
I anyone can point me to any reason = or=20 documentation why this is so, I would gratefully appreciate=20 it.
 
Thanks
Tim
------=_NextPart_000_001A_01C2D66F.F0222A40--