Port forwarding

[Jason Opperisano]

On Fri, 2004-09-17 at 09:52, KUCKAERTZ R=C3=A9gis - NVISION wrote:
> > is it possible that $REAL_IP is a local IP address on the=20
> > machine running netfilter?  the reason i ask is that the=20
> > packet counters on the FORWARD chain are zero (whereas INPUT=20
> > and OUTPUT are over 40000).
>=20
> Unfortunately, it is not. Really weird, since packets are correctly DNA=
T'ed
> _before_ going through the filter rules, then the kernel should detect =
that
> they are not intended to it, neh?
>=20
> I tried tcpdump'ing the $REAL_IP and $REAL_PORT, but then nothing match=
ed
> the filter.
>=20
> I must have forgot one thing, since _it worked_ in the past!! :'(
>=20
> Thanks for your help!
>=20

stupid question:  is IP forwarding enabled (sysctl net.ipv4.ip_forward)?

'nother stupid question:  is routing correctly configured from the
netfilter machine to $REAL_MACHINE; i.e., can you ping $REAL_IP from the
netfilter machine?

-j

--=20
Jason Opperisano <opie at 817west.com>