From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-1?Q?J=F6rg_Harmuth?= Subject: Re: Problem reexplained..... Date: Wed, 28 Sep 2005 11:49:45 +0200 Message-ID: <433A6739.7090904@mnemon.de> References: <20050927161440.60437.qmail@web54707.mail.yahoo.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20050927161440.60437.qmail@web54707.mail.yahoo.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Alaios wrote: > Let me reexplain the problem plz >>>From src 143.233.222.253 starts some traffic that goes > to the 143.233.222.77 this is the eth1 of the laptop > The laptop has also one more interface the 10.2.4.1 > that is connected back to back (cross cable) with the > interface of an other pc with ip address 10.2.4.2 > IO want the traffic that reaches 143.233.222.77 reach > the 10.2.4.2 > This is the first step.. when i succesfully implement > this then the next step is to forward this traffic > from the pc to a second pc... ( i ll use the same > methodology if step one works) > So now we can only focus to the first step > Plz take in mind that i dont have any firewall enables > /proc/sys/net/ipv4/ip_forward is set to 1. I have no > other iptables rules applied... I will only apply what > u ll write to do.. > Before applying any iptables rules firstly i do > iptables -F > iptables -F -t nat First do as AragonX recommended. There is no sense in continuing if the basics aren't ok. Additionally check if the default gateway of 10.2.4.2 is set to 10.2.4.1. Then try Edmundo's approach and add iptables -t nat -A POSTROUTING -o eth1 -j SNAT \ --to 143.233.222.77 Question: Is 143.233.222.77 a dial-up interface ? If it doesn't work tcpdump on 143.233.222.77, then on 10.2.4.1,..., briefly: find the point, where it breaks. You may post the dumps. Some surrounding information could help too: ifconfig, route -n, iptables-save, hmm - I think that should do. Good luck, Joerg