From: Liam Helmer (linuxlists_at_thevenue.org)
Date: Mon 20 Dec 2004 - 19:54:16 GMT
Correction:
-A POSTROUTING -o ppp0
-i ppp0 won't work, sorry.
Cheers,
Liam
On Mon, 2004-12-20 at 09:28 -0800, Liam Helmer wrote:
> On Sat, 2004-12-18 at 12:28 +0100, Vincenzo Agosto wrote:
> > Herbert Poetzl wrote:
> > IP=`ifconfig ppp0 | grep inet | cut -d: -f2 | awk {'print $1'}`
> > iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d ! 192.168.1.0/24 -j
> > SNAT --to-source $IP
> > same problem :(
>
> Wanna try quoting a little less message? ;)
>
> Add "-i ppp0" to the above line, it'll work better (e.g. -A POSTROUTING
> -i ppp0)
>
> Try a tcpdump now. If there's a problem, it may be that you're missing
> allow rules:
>
> iptables -I INPUT -i ppp0 -m state --state established,related -j ACCEPT
> iptables -I OUTPUT -o ppp0 -s 192.168.-j ACCEPT
>
> That may help.
>
> Cheers,
> Liam
>
>
> > Vserver mailing list
> > Vserver_at_list.linux-vserver.org
> > http://list.linux-vserver.org/mailman/listinfo/vserver
--StrongBox Linux http://www.strongboxlinux.com "Making Security Friendly"
_______________________________________________ Vserver mailing list Vserver_at_list.linux-vserver.org http://list.linux-vserver.org/mailman/listinfo/vserver