[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: nat ipchains on debian woody

Hi Mark,

I have test your script but my woody give me this response:

morpheo:~# cat compartir2
echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/conf/eth0/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/eth1/rp_filter

iptables -t nat -I POSTROUTING -s -i eth1 -o eth0 -j

morpheo:~# ./compartir2
modprobe: Can't locate module ip_tables
iptables v1.2.6a: can't initialize iptables table `nat': iptables who? (do
you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

What can i do to solve this new issue?

My fisrt script which use ipchains was this:

morpheo:~# cat compartir

echo 1 > /proc/sys/net/ipv4/ip_forward
/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -j MASQ -s

Thanks in advance,

----- Original Message -----
From: "MB" <sparkynine@yahoo.com>
To: "Francisco Castillo" <fcastillo@hostgreen.com>;
Sent: Monday, June 28, 2004 9:16 PM
Subject: Re: nat ipchains on debian woody

Have you tried iptables instead?  If your kernel supports iptables,

echo 1 > /proc/sys/net/ipv4/ip_forward
echo 1 > /proc/sys/net/ipv4/conf/$both_eth_devs/rp_filter

iptables -t nat -I POSTROUTING -s -i eth1 -o eth0 -j

iptables also does the firewalling in other chains, btw


--- Francisco Castillo <fcastillo@hostgreen.com> wrote:
> Hello Gurus,
> I have installed a debian woody with to interfaces eth0 and eth1. I
> has configured the internet conexion on eth0 which has got a static
> ip on internet. And on eth1 i want to put a interface to do a proxy
> nat gateway on my internal lan (i want to put a on it).
> I have read doc to do it but when i apply this doc i have a "your
> kernel seems to not support ipchains" messages when i try to do this.
> After this i have a ip on eth1 but my pc´s on the
> internal lan can´t have internet access througth the eth0 (internet
> conexion).
> I think that the problem is that the kernel do not have a
> ipmasquerade support (NAT suppport), so i think that this is the only
> steep i need to do in order to apply correct the steps of the
> configuration that i has a problem with. So
> Did you know how to give a NAT (ipmasquerade support) on a debian
> woody kernel in order to solve my problem?
> What do exactly the command "apt-get install ipmasq" in this context
> ?
> Thanks in advance,
> Francisco.

Reply to: