On Tue, Sep 23, 2003 at 02:06:40PM +0300, Mihalis I. Tsoukalos wrote: > On Tue, Sep 23, 2003 at 11:37:29AM +0300, Mihalis I. Tsoukalos wrote: > > Dear list, > > I have the following problem: > > > > After upgrading the ipmasq package yesterday, NAT is not working > > properly. > > > > What do I need to do in order to solve it? > > I am using Debian woody. > > > > TIA, > > Mihalis > > More info: > > After a dpkg-reconfigure ipmasq I get: > > Initializing IP Masquerading...iptables: No chain/target/match by that > name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > iptables: No chain/target/match by that name > done. > Loading IP Masquerade kernel modules...done. > > Still, NAT is not working properly. > > TIA, > Mihalis.
More info that might help: ipmasq -v output: #: Interfaces found: #: ppp0 194.219.142.142/255.255.255.255 #: eth0 10.100.0.1/255.255.0.0 echo "0" > /proc/sys/net/ipv4/ip_forward /sbin/iptables -P INPUT DROP /sbin/iptables -P OUTPUT DROP /sbin/iptables -P FORWARD DROP /sbin/iptables -F INPUT /sbin/iptables -F OUTPUT /sbin/iptables -F FORWARD /sbin/iptables -t mangle -P PREROUTING ACCEPT /sbin/iptables -t mangle -P OUTPUT ACCEPT /sbin/iptables -t mangle -F PREROUTING /sbin/iptables -t mangle -F OUTPUT /sbin/iptables -t nat -P PREROUTING ACCEPT /sbin/iptables -t nat -P POSTROUTING ACCEPT /sbin/iptables -t nat -P OUTPUT ACCEPT /sbin/iptables -t nat -F PREROUTING /sbin/iptables -t nat -F POSTROUTING /sbin/iptables -t nat -F OUTPUT /sbin/iptables -A INPUT -j ACCEPT -i lo /sbin/iptables -A INPUT -j LOG -i ! lo -s 127.0.0.1/255.0.0.0 iptables: No chain/target/match by that name /sbin/iptables -A INPUT -j DROP -i ! lo -s 127.0.0.1/255.0.0.0 /sbin/iptables -A INPUT -j ACCEPT -i eth0 -d 255.255.255.255/32 /sbin/iptables -A INPUT -j ACCEPT -i eth0 -s 10.100.0.1/255.255.0.0 /sbin/iptables -A INPUT -j ACCEPT -i eth0 -d 224.0.0.0/4 -p ! tcp /sbin/iptables -A INPUT -j LOG -i ppp0 -s 10.100.0.1/255.255.0.0 iptables: No chain/target/match by that name /sbin/iptables -A INPUT -j DROP -i ppp0 -s 10.100.0.1/255.255.0.0 /sbin/iptables -A INPUT -j ACCEPT -i ppp0 -d 255.255.255.255/32 /sbin/iptables -A INPUT -j ACCEPT -i ppp0 -d 194.219.142.142/32 /sbin/iptables -t nat -A POSTROUTING -s 10.100.0.1/255.255.0.0 -j MASQUERADE /sbin/iptables -A FORWARD -i eth0 -o ppp0 -s 10.100.0.1/255.255.0.0 -j ACCEPT /sbin/iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT iptables: No chain/target/match by that name /sbin/iptables -A OUTPUT -j ACCEPT -o lo /sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 255.255.255.255/32 /sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 10.100.0.1/255.255.0.0 /sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 224.0.0.0/4 -p ! tcp /sbin/iptables -A FORWARD -j LOG -o ppp0 -d 10.100.0.1/255.255.0.0 iptables: No chain/target/match by that name /sbin/iptables -A FORWARD -j DROP -o ppp0 -d 10.100.0.1/255.255.0.0 /sbin/iptables -A OUTPUT -j LOG -o ppp0 -d 10.100.0.1/255.255.0.0 iptables: No chain/target/match by that name /sbin/iptables -A OUTPUT -j DROP -o ppp0 -d 10.100.0.1/255.255.0.0 /sbin/iptables -A OUTPUT -j ACCEPT -o ppp0 -d 255.255.255.255/32 /sbin/iptables -A OUTPUT -j ACCEPT -o ppp0 -s 194.219.142.142/32 echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/iptables -A INPUT -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0 iptables: No chain/target/match by that name /sbin/iptables -A INPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 /sbin/iptables -A OUTPUT -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0 iptables: No chain/target/match by that name /sbin/iptables -A OUTPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 /sbin/iptables -A FORWARD -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0 iptables: No chain/target/match by that name /sbin/iptables -A FORWARD -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0 router:/usr/src/linux# hope this will help you help me :-) Mihalis. -- 09:40:09 up 1:21, 2 users, load average: 0.31, 0.42, 0.20 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
