From: Liam Helmer (linuxlists_at_thevenue.org)
Date: Mon 20 Dec 2004 - 17:28:20 GMT
On Sat, 2004-12-18 at 12:28 +0100, Vincenzo Agosto wrote:
> Herbert Poetzl wrote:
> IP=`ifconfig ppp0 | grep inet | cut -d: -f2 | awk {'print $1'}`
> iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -j
> SNAT --to-source $IP
> same problem :(
Wanna try quoting a little less message? ;)
Add "-i ppp0" to the above line, it'll work better (e.g. -A POSTROUTING
-i ppp0)
Try a tcpdump now. If there's a problem, it may be that you're missing
allow rules:
iptables -I INPUT -i ppp0 -m state --state established,related -j ACCEPT
iptables -I OUTPUT -o ppp0 -s 192.168.-j ACCEPT
That may help.
Cheers,
Liam
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
--StrongBox Linux http://www.strongboxlinux.com "Making Security Friendly"
_______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver