From: Steffen Beyer <steffen@beyer.io>
To: netfilter@vger.kernel.org
Subject: Masquerading fails after first packet
Date: Tue, 8 Feb 2011 18:49:22 +0100 [thread overview]
Message-ID: <20110208184922508316.a730ff6b@beyer.io> (raw)
Hello,
I'm trying to get masquerading/SNAT to work on a Ubiquity AirOS device
(kernel 2.6.15). All chains are empty, policy ACCEPT, just one rule:
Chain POSTROUTING (policy ACCEPT 3 packets, 200 bytes)
pkts bytes target prot opt in out source
destination
4 288 SNAT all -- any eth1 192.168.23.0/24
anywhere to:10.213.5.9
When I ping an internet host from the internal network, one reply arrives,
then it gets stuck. No more packets appear on eth1.
Same with TCP; after trying to open a connection (ACK reply arrives,
followed by silence) I find an entry in ip_conntrack:
tcp 6 49 SYN_RECV src=192.168.23.2 dst=88.198.17.205 sport=3955
dport=22 src=88.198.17.205 dst=10.213.5.9 sport=22 dport=3955 use=2
What's missing? Any insight appreciated!
Kind regards,
--
Steffen Beyer <steffen@beyer.io>
GnuPG key fingerprint: CA00 1611 242B 89D4 E643 E235 05F3 7689 DD3E EB26
Public key available upon request or at http://wwwkeys.de.pgp.net
next reply other threads:[~2011-02-08 17:49 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-02-08 17:49 Steffen Beyer [this message]
2011-02-09 13:35 ` Masquerading fails after first packet Steffen Beyer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20110208184922508316.a730ff6b@beyer.io \
--to=steffen@beyer.io \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox