Need help with iptables

Rusty Russell rusty@linuxcare.com.au
Sat, 03 Jun 2000 03:58:31 +0930


In message <00060111145400.17855@sasami> you write:
> HI,

Hi James,

> I read the docs and found a iptables command that would suit my needs:
> iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 
> 206.66.185.247-207.66.185.253

Looks good.

> After entering this command my box is able to ping eth0 on the NAT box but I 
> can't ping anything outside of that interface. I'm using kernel 2.3.99-pre8 
> with iptables-1.1.0. Any help would be great. Thanks!

Did you turn IP forwarding on?  `cat /proc/sys/net/ipv4/ip_forward'.

If that fails, try seeing if the packets are going out (tcpdump from a
box in front of the NAT box).

Rusty.
--
Hacking time.