Re: Re[4]: [Cooker] iptables NAT problem

2001-10-21 Thread Borsenkow Andrej
On ÷ÓË, 2001-10-21 at 18:49, Robin Cook wrote: > Hello Borsenkow, > > The -i eth1 doesn't work it says it can't be used in postrouting. > O.K., should have checked man page first :-) > Ok tried the static arp with the same results. > I also used "ip address add 172.16.231.x dev eth0" which put

Re[4]: [Cooker] iptables NAT problem

2001-10-21 Thread Robin Cook
Hello Borsenkow, The -i eth1 doesn't work it says it can't be used in postrouting. Ok tried the static arp with the same results. I also used "ip address add 172.16.231.x dev eth0" which put the ips on eth0 with the same results. Sunday, October 21, 2001, 8:52:24 AM, you wrote: BA> On ÷ÓË, 200

Re: Re[2]: [Cooker] iptables NAT problem

2001-10-21 Thread Borsenkow Andrej
On ÷ÓË, 2001-10-21 at 09:01, Robin Cook wrote: > Hello David, > > Found the problem to the single ping return. > > iptables -t nat -s 10.1.1.0/24 -o eth0 -j SNAT 172.16.231.57-172.16.231.59 > Yes I was about to suggest the same. You can also do -i eth1 -o eth0 to match only packets from

Re[2]: [Cooker] iptables NAT problem

2001-10-20 Thread Robin Cook
Hello David, Found the problem to the single ping return. iptables -t nat -s 10.1.1.0/24 -o eth0 -j SNAT 172.16.231.57-172.16.231.59 if I leave the -s 10.1.1.0/24 out, the routing box and the outside box stop being able to ping to the ISP or Internet (just the first one returns the re

RE: [Cooker] iptables NAT problem

2001-10-19 Thread Borsenkow Andrej
> Once I turn NAT on all communication between the 2 nic cards seems > to die. With NAT off I can send data between the 2 sides (I put a > machine on the outside network for test.) > What exactly do you mean? Please, give command that worked before and fails after NAT has been enabled, tog

[Cooker] iptables NAT problem

2001-10-18 Thread Robin Cook
Hello, I seem to be having an iptables problem. Once I turn NAT on all communication between the 2 nic cards seems to die. With NAT off I can send data between the 2 sides (I put a machine on the outside network for test.) in /etc/sysconfig/iptables I add the following line in the NA