From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-1?Q?J=F6rg_Harmuth?= Subject: Re: Problem reexplained..... Date: Wed, 28 Sep 2005 12:19:25 +0200 Message-ID: <433A6E2D.3020809@mnemon.de> References: <20050927161440.60437.qmail@web54707.mail.yahoo.com> <433A6739.7090904@mnemon.de> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <433A6739.7090904@mnemon.de> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: netfilter@lists.netfilter.org J=F6rg Harmuth wrote: > Alaios wrote: >> Let me reexplain the problem plz >>> From src 143.233.222.253 starts some traffic that goes >> to the 143.233.222.77 this is the eth1 of the laptop >> The laptop has also one more interface the 10.2.4.1 >> that is connected back to back (cross cable) with the >> interface of an other pc with ip address 10.2.4.2 >> IO want the traffic that reaches 143.233.222.77 reach >> the 10.2.4.2 >> This is the first step.. when i succesfully implement >> this then the next step is to forward this traffic >> from the pc to a second pc... ( i ll use the same >> methodology if step one works) >> So now we can only focus to the first step >> Plz take in mind that i dont have any firewall enables >> /proc/sys/net/ipv4/ip_forward is set to 1. I have no >> other iptables rules applied... I will only apply what >> u ll write to do.. >> Before applying any iptables rules firstly i do >> iptables -F iptables -F -t nat >=20 >=20 > First do as AragonX recommended. There is no sense in continuing if the= =20 > basics aren't ok. Additionally check if the default gateway of 10.2.4.2= =20 > is set to 10.2.4.1. Then try Edmundo's approach and add >=20 > iptables -t nat -A POSTROUTING -o eth1 -j SNAT \ > --to 143.233.222.77 >=20 > Question: Is 143.233.222.77 a dial-up interface ? >=20 > If it doesn't work tcpdump on 143.233.222.77, then on 10.2.4.1,...,=20 > briefly: find the point, where it breaks. You may post the dumps. Some=20 > surrounding information could help too: ifconfig, route -n,=20 > iptables-save, hmm - I think that should do. >=20 > Good luck, >=20 > Joerg Humm, I should have read the whole thread before posting, especially the=20 previous one :( My fault. Yes, indeed. In the first place this is a routing problem. Read Nicks=20 charming explanation of subnet masks and you will see, that it can't=20 work. Do as others recommended: put a box between or change 253 to=20 something lower than 127 or change your network from 64/26 to 192/26 or=20 add a default gateway (you could try route add default eth1 - maybe it=20 works) - whatever you are able to do. But first fix your routing. Good luck, Joerg