[oclug] iptables NAT + routing problem

Adrian Chung adrian at enfusion-group.com
Tue Mar 19 17:49:42 EST 2002


On Tue, Mar 19, 2002 at 05:38:41PM -0500, Matt McParland wrote:
> On Tue, 19 Mar 2002, Adrian Chung wrote:
> 
> > You're masquerading any and all traffic going out over ppp0.  What you
> > want instead is to only masquerade traffic from $LAN, and make sure
> > you have FORWARD rules allowing traffic to and from the /29 you're
> > forwarding:
> > 
> >   iptables -t nat -A POSTROUTING -s $LAN -o $INETDEV -j MASQUERADE
> 
> I tried that earlier today and it didn't work.  I tried again, and it 
> still doesn't. :)

Doesn't work as in traffic doesn't reach the destination?  Or traffic
reaches the destination but looks like it came from the IP of your
ppp0 interface?

How are the /29 servers connected to this box?  Are they connected to
a switch/hub through eth0, or eth1?

--
Adrian Chung (adrian at enfusion-group dot com)
http://www.enfusion-group.com/~adrian
GPG Fingerprint: C620 C8EA 86BA 79CC 384C E7BE A10C 353B 919D 1A17
[toad.enfusion-group.com] up 17:20, 3 users, load average: 0.13




More information about the OCLUG mailing list