S P Arif Sahari Wibowo wrote in
news:Pine.LNX.4.63.0508220850270.5253@localhost.lo caldomain:

> Hi!
>
> Upon moving from RH 9 (kernel 2.4.18 and 2.4.20) to WBEL 4 (RHEL
> 4 recompile, kernel 2.6.9), a simple masquerading snat stop
> working. Packet reach the PREROUTING chain but never reach
> POSTROUTING chain.
>
> Any idea why and how to fix it?

Do you have ip_forward turned on?

Klazmon.

hi,

i would say the same - assumed you compiled your kernel under
/usr/local/src/linux-2.6.x, can you check

your-server:/usr/local/src/linux-2.6.x# cat .config | grep MASQ

CONFIG_IP_NF_TARGET_MASQUERADE=y

your-server:/usr/local/src/linux-2.6.x# cat .config | grep NAT

CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_NAT_NEEDED=y
# CONFIG_IP_NF_NAT_SNMP_BASIC is not set
CONFIG_IP_NF_NAT_IRC=y
CONFIG_IP_NF_NAT_FTP=y
CONFIG_IP_NF_NAT_TFTP=y
CONFIG_NATSEMI=m

you have to enable FUL_NAT or something like this under the
Netfilter-Options.

does

cat /proc/sys/net/ipv4/ip_forward

returning a "1"?


greetings


lasseboo

On Mon, 23 Aug 2005, Llanzlan Klazmon wrote:
> Do you have ip_forward turned on?



Well, it seems that you got
the problem correctly, I should know, I did it before.

Thank you!



--
Stephan Paul Arif Sahari Wibowo
_____ _____ _____ _____
/____ /____/ /____/ /____
_____/ / / / _____/ http://www.arifsaha.com/

> *nat
> :PREROUTING ACCEPT [0:0]
> :POSTROUTING ACCEPT [0:0]
> :OUTPUT ACCEPT [0:0]
> -A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERADE
> COMMIT


Where is forwarding mode?



--
Raqueeb Hassan
Bangladesh

Llanzlan Klazmon wrote:
> S P Arif Sahari Wibowo wrote in
> news:Pine.LNX.4.63.0508220850270.5253@localhost.lo caldomain:
>
>
>>Hi!
>>
>>Upon moving from RH 9 (kernel 2.4.18 and 2.4.20) to WBEL 4 (RHEL
>>4 recompile, kernel 2.6.9), a simple masquerading snat stop
>>working. Packet reach the PREROUTING chain but never reach
>>POSTROUTING chain.
>>
>>Any idea why and how to fix it?
>
>
> Do you have ip_forward turned on?
>
Here is part of my /etc/sysctl.conf:

# Kernel sysctl configuration file for Red Hat Linux
#
# For binary values, 0 is disabled, 1 is enabled. See sysctl(8) and
# sysctl.conf(5) for more details.

# Controls IP packet forwarding
net.ipv4.conf.default.rp_filter = 1
net.ipv4.ip_forward = 1 <---<<<
net.ipv4.conf.eth0.forwarding = 1
net.ipv4.conf.eth1.forwarding = 1

# Controls source route verification
net.ipv4.conf.default.rp_filter = 1

--
.~. Jean-David Beyer Registered Linux User 85642.
/V\ PGP-Key: 9A2FC99A Registered Machine 241939.
/( )\ Shrewsbury, New Jersey http://counter.li.org
^^-^^ 06:30:00 up 69 days, 25 min, 3 users, load average: 4.18, 4.20, 4.10

S P Arif Sahari Wibowo wrote in
news:Pine.LNX.4.63.0508230145010.6856@localhost.lo caldomain:

> On Mon, 23 Aug 2005, Llanzlan Klazmon wrote:
>> Do you have ip_forward turned on?
>
>
>
> Well, it seems that you got
> the problem correctly, I should know, I did it before.
>
> Thank you!
>
>
>

Don't worry. I've been caught out myself by things like that plenty of
times. It's often the things that you know well that get overlooked.

Klazmon.