ALT Linux Team development discussions
 help / color / mirror / Atom feed
From: Victor V Ismakaev <ivv@altlinux.ru>
To: devel@altlinux.ru
Subject: [devel] Compact & NAT
Date: Mon, 15 Mar 2004 09:29:06 +0500
Message-ID: <200403150929.06723.ivv@altlinux.ru> (raw)

Приветствую.
Господа,а НАТ на связке iptables-1.2.9-alt1 + kernel-image-std-up-2.4.22-alt15 
рабочий?
Что-то у меня внутренняя сетка не натиться, хотя в iptables_modules прописаны
ip_conntrack
ip_conntrack_ftp
ip_conntrack_irc
ip_nat_ftp
ip_nat_irc
#ip_pool
ip_queue
ip_tables
ipt_LOG
ip_tables
iptable_nat
ipt_state
ipt_multiport
#ipt_mport
ipt_limit
ipt_TCPMSS
ipt_REJECT
............
в iptables 
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -o eth1 -p icmp -j SNAT 
--to-source $REAL_IP
-A POSTROUTING -s 192.168.0.0/255.255.255.0 -o eth1 -p tcp -m multiport 
--dports telnet,ftp-data,ftp,5861,5190,ircd,6668,6669,pop3,smtp -j SNAT 
--to-source $REAL_IP
FORWARD включен через sysctl.conf.
iptables -L -t nat - показывает мои цепочки.
На внутреннем интерфейсе пакеты,идущие с внутренней сети во внешнюю,видны, а 
на внешний ничего не приходит.
Но - внутрення сетка не натиться :( Куда копать?


-- 
С уважением
Виктор В Исмакаев
ivv@altlinux.ru



             reply	other threads:[~2004-03-15  4:29 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-03-15  4:29 Victor V Ismakaev [this message]
2004-03-15  9:50 ` Anton Farygin
2004-03-15 10:05   ` Denis Ovsienko
2004-03-15  5:08     ` Victor V Ismakaev
2004-03-15 10:13       ` Sergey Pinaev
2004-03-15  5:36         ` Victor V Ismakaev
2004-03-15 10:43           ` Sergey Pinaev
2004-03-15  6:16             ` Victor V Ismakaev

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200403150929.06723.ivv@altlinux.ru \
    --to=ivv@altlinux.ru \
    --cc=devel@altlinux.ru \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux Team development discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
		devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
	public-inbox-index devel

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.devel


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git