ALT Linux sysadmins discussion
 help / color / mirror / Atom feed
From: Maks Re <admaks@gmail.com>
To: sysadmins@lists.altlinux.org
Subject: Re: [Sysadmins] bridge & iptables MASQUERADE
Date: Thu, 16 Apr 2009 23:12:33 +0400
Message-ID: <20090416231233.07001686@lynx> (raw)
In-Reply-To: <200904161151.59125.a_s_y@sama.ru>

>  
> А что по поводу iptabls -nL -t nat ?
> 

# iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 1117K packets, 121M bytes)
 pkts bytes target     prot opt in     out     source               destination
 1056 51104 DNAT       tcp  --  *      *       0.0.0.0/0            89.179.x.y      tcp dpt:33573 to:192.168.100.12:33573
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            89.179.x.y      tcp dpt:33574 to:192.168.100.15:33574
    1    60 DNAT       tcp  --  *      *       0.0.0.0/0            89.179.x.y      tcp dpt:80 to:192.168.102.55:80
12969  656K DNAT       tcp  --  *      *       0.0.0.0/0            89.179.x.y      tcp dpt:33575 to:192.168.100.11:33575

Chain POSTROUTING (policy ACCEPT 21297 packets, 1240K bytes)
 pkts bytes target     prot opt in     out     source               destination
    1   462 MASQUERADE  all  --  *      *       192.168.122.0/24    !192.168.122.0/24
  547 61928 ACCEPT     all  --  *      *       192.168.100.0/24     192.168.100.0/24
    0     0 ACCEPT     all  --  *      *       192.168.102.0/24     192.168.102.0/24
24860 1350K SNAT       all  --  *      ppp0    192.168.100.0/24     0.0.0.0/0           to:89.179.x.y
    0     0 SNAT       all  --  *      ppp0    192.168.102.0/24     0.0.0.0/0           to:89.179.x.y

Chain OUTPUT (policy ACCEPT 5994 packets, 471K bytes)
 pkts bytes target     prot opt in     out     source destination

но как-то все странно.

установил свежее ядро 2.6.27-std-def-alt15
немного улучшилось, работа с маскарадингом/снат и пр...
но что-то "не то"
 на 2.6.27-ovz-smp-alt4 еще не проверял


  reply	other threads:[~2009-04-16 19:12 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-04-11 15:33 Sergey
2009-04-11 17:08 ` Sergey
2009-04-13  6:57 ` Владимир
2009-04-13  8:00   ` Sergey
2009-04-13 12:22   ` Sergey
2009-04-13 12:31     ` Sergey
2009-04-14  5:48   ` Sergey
2009-04-14 11:37     ` Maks Re
2009-04-16  6:51       ` Sergey
2009-04-16 19:12         ` Maks Re [this message]
2009-04-17  4:56           ` Sergey
2009-04-17  6:42             ` Michael Shigorin
2009-04-17  6:42               ` Michael Shigorin
2009-04-17  6:58               ` Sergey

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090416231233.07001686@lynx \
    --to=admaks@gmail.com \
    --cc=sysadmins@lists.altlinux.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux sysadmins discussion

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \
		sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com
	public-inbox-index sysadmins

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.sysadmins


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git