Re: Iptables and Zebra

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Tuesday 16 December 2003 9:34 am, Bertrand TACHAGO wrote:

> Hi to all!
> I'm trying to setup a zebra router on a RH9 machine but right I'm blocked
> because there's a firewall (iptables) problem. I had entered a POSTROUTING
> rule (iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE) but the packets
> are not routed to the external interface. Can somebody help me solve this
> problem (use zebra routing protocol to route packets from my network to the
> Internet)?

Netfilter does not route packets for you.   It can change the source or 
destination addresses, and it can block certain packets from being routed, 
but the decision about where / how / why to route packets is not made by 
netfilter.

The rule you have given above will make sure that all packets leaving 
interface eth0 will have the IP address of that interface as their source 
address.   It does not affect in any way which packets get routed via eth0 on 
their way anywhere else.

Sorry I can't be more help, but I wanted to make sure you understood that a 
routing problem is not a netfilter problem.

Antony.

-- 
The difference between theory and practice is that in theory there is no 
difference, whereas in practice there is.

                                                     Please reply to the list;
                                                           please don't CC me.