Re: IP forwarding problem

[Matt Zagrabelny <mzagrabe@d.umn.edu>]

On Fri, 2006-01-27 at 21:01 +0000, Oliver Elphick wrote:
> On Fri, 2006-01-27 at 12:31 -0600, Matt Zagrabelny wrote:
> > On Fri, 2006-01-27 at 14:52 +0000, Oliver Elphick wrote:
> > > Can anyone help with this network problem, please?
> > > 
> > > This machine is an internal router, with two network cards.  iptables is
> > > not configured in the kernel, since masquerading and filtering is not
> > > required.  (There is a separate firewall machine.)
> > > 
> > > 192.168.2 (eth0) is a network with Windows machines.  Packets to and
> > > from that network are no longer being forwarded.  The routing table
> > > appears to be correct and IP forwarding is turned on.
> > 
> > how are you turning forwarding on?
> 
> $ cat /etc/network/options
> ip_forward=yes
> spoofprotect=yes
> syncookies=no

i guess that method is deprecated: see bug #338235
but that is splitting hairs, it obviously is setting your sysctl
options.

well, take a look at your the FORWARD chain in your filter table:

# iptables -v -n -t filter -L FORWARD

and report that result.

also you could do some tcpdump'ing.

-matt zagrabelny