From: nullv@gmx.com
To: netfilter@vger.kernel.org
Subject: wan ip forwarding
Date: Sat, 18 Feb 2012 14:46:16 -0500 [thread overview]
Message-ID: <20120218194620.300960@gmx.com> (raw)
Hi, I'm hoping that you can point out what i'm missing here. I have a server (router0) with a public ip 41.123.234.74/29 that's using an internet modem 41.123.234.73/29 as a gateway. the server (router0) also has a second card used for lan comms where it has ip address 10.0.0.1/8. addresses are broadcast via dhcp along with DNS and gateway settings and everything works perfectly when i MASQUERADE the local ips to the wan address with iptables. The issue is this: i'm trying to set up another server (db0) behind router0 on the lan side and want to have it's packets go the my router0 gateway and be forwarded to the internet side and vice versa. db0 has an address 41.123.234.75/29 with .74 set as the gateway. if i set up my addressing on db0 using lan addresses and 10.0.0.1 my db0 server can connect and everything but if i use the wan address i can't connect even to the 41.123.234.74/29 router0 address. i had inserted the following rule to my tables forward chain: iptables -I FORWARD -s 41.123.234.72/29 -j ACCEPT to allow public packets from either side to be forwarded to both sides but i can't seem to get the boxes to through to each other. Can anyone tell me were i'm getting it wrong? Thanks in advance
reply other threads:[~2012-02-18 19:46 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20120218194620.300960@gmx.com \
--to=nullv@gmx.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox