About this list Date view Thread view Subject view Author view Attachment view

From: Liam Helmer (linuxlists_at_thevenue.org)
Date: Mon 20 Dec 2004 - 17:28:20 GMT


On Sat, 2004-12-18 at 12:28 +0100, Vincenzo Agosto wrote:
> Herbert Poetzl wrote:
> IP=`ifconfig ppp0 | grep inet | cut -d: -f2 | awk {'print $1'}`
> iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -j
> SNAT --to-source $IP
> same problem :(

Wanna try quoting a little less message? ;)

Add "-i ppp0" to the above line, it'll work better (e.g. -A POSTROUTING
-i ppp0)

Try a tcpdump now. If there's a problem, it may be that you're missing
allow rules:

iptables -I INPUT -i ppp0 -m state --state established,related -j ACCEPT
iptables -I OUTPUT -o ppp0 -s 192.168.-j ACCEPT

That may help.

Cheers,
Liam

> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver

-- 

StrongBox Linux http://www.strongboxlinux.com "Making Security Friendly"

_______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 20 Dec 2004 - 17:28:56 GMT by hypermail 2.1.3