[Vserver] Vserver on DSL-Router. Problem with SNAT

From: Juergen Schmidt <mister-el_at_gmx.de>
Date: Tue 29 Nov 2005 - 05:42:41 GMT
Message-Id: <1133242961.9692.31.camel@el-tosh.ix-tech.com>

Hi,
I have a vserver (debian stable vs1.9.5.x-4) on a dsl-router.
At the moment the default gw in the lan is 10.0.1.1, and this maschine
masquerades all packages. But now I wish to use squid on the vserver to
reach the internet. The problem now is that i'm not able to masquerade
the ip-packages from the vserver.

My interfaces are as follows:

eth0:0roe 10.0.1.10/24 (vserver)
eth0 10.0.1.1/24 (host)
and
ppp0 84.165.20.114 (but dynamic ip-addresses)

I have tried the following iptables roules on the vserverhost (what is
the corret name for that maschine how holds the vserver?):

'iptables -t nat -I POSTROUTING -s 10.0.1.0/24 -j MASQUERADE' (every
host in the lan can reach the internet, but not the vserver)

'iptables -t nat -I POSTROUTING -s 10.0.1.10/32 -j MASQUERADE' (nothing
happens. The outgoning IP-Packages from the vserver over the ppp0 device
have already 10.0.1.10 as source IP)

'iptables -t nat -I POSTROUTING -s 10.0.1.10/32 -j SNAT --to-source
84.165.20.114' (nothing happens)

'iptables -t nat -I POSTROUTING -s 10.0.1.10/32 -d www.google.de -j SNAT
--to-source 84.165.20.114' (now only icmp works, verry strange)

I tried to set up the ppp0 device for the vserver (ppp0:0roe
84.165.20.114), but without any luk.

By,
        Juergen

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Tue Nov 29 06:04:27 2005

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 29 Nov 2005 - 06:04:28 GMT by hypermail 2.1.8