Re: ipmasq not doing NAT after upgrade
On Tue, Sep 23, 2003 at 02:06:40PM +0300, Mihalis I. Tsoukalos wrote:
> On Tue, Sep 23, 2003 at 11:37:29AM +0300, Mihalis I. Tsoukalos wrote:
> > Dear list,
> > I have the following problem:
> >
> > After upgrading the ipmasq package yesterday, NAT is not working
> > properly.
> >
> > What do I need to do in order to solve it?
> > I am using Debian woody.
> >
> > TIA,
> > Mihalis
>
> More info:
>
> After a dpkg-reconfigure ipmasq I get:
>
> Initializing IP Masquerading...iptables: No chain/target/match by that
> name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> done.
> Loading IP Masquerade kernel modules...done.
>
> Still, NAT is not working properly.
>
> TIA,
> Mihalis.
More info that might help:
ipmasq -v output:
#: Interfaces found:
#: ppp0 194.219.142.142/255.255.255.255
#: eth0 10.100.0.1/255.255.0.0
echo "0" > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -P INPUT DROP
/sbin/iptables -P OUTPUT DROP
/sbin/iptables -P FORWARD DROP
/sbin/iptables -F INPUT
/sbin/iptables -F OUTPUT
/sbin/iptables -F FORWARD
/sbin/iptables -t mangle -P PREROUTING ACCEPT
/sbin/iptables -t mangle -P OUTPUT ACCEPT
/sbin/iptables -t mangle -F PREROUTING
/sbin/iptables -t mangle -F OUTPUT
/sbin/iptables -t nat -P PREROUTING ACCEPT
/sbin/iptables -t nat -P POSTROUTING ACCEPT
/sbin/iptables -t nat -P OUTPUT ACCEPT
/sbin/iptables -t nat -F PREROUTING
/sbin/iptables -t nat -F POSTROUTING
/sbin/iptables -t nat -F OUTPUT
/sbin/iptables -A INPUT -j ACCEPT -i lo
/sbin/iptables -A INPUT -j LOG -i ! lo -s 127.0.0.1/255.0.0.0
iptables: No chain/target/match by that name
/sbin/iptables -A INPUT -j DROP -i ! lo -s 127.0.0.1/255.0.0.0
/sbin/iptables -A INPUT -j ACCEPT -i eth0 -d 255.255.255.255/32
/sbin/iptables -A INPUT -j ACCEPT -i eth0 -s 10.100.0.1/255.255.0.0
/sbin/iptables -A INPUT -j ACCEPT -i eth0 -d 224.0.0.0/4 -p ! tcp
/sbin/iptables -A INPUT -j LOG -i ppp0 -s 10.100.0.1/255.255.0.0
iptables: No chain/target/match by that name
/sbin/iptables -A INPUT -j DROP -i ppp0 -s 10.100.0.1/255.255.0.0
/sbin/iptables -A INPUT -j ACCEPT -i ppp0 -d 255.255.255.255/32
/sbin/iptables -A INPUT -j ACCEPT -i ppp0 -d 194.219.142.142/32
/sbin/iptables -t nat -A POSTROUTING -s 10.100.0.1/255.255.0.0 -j
MASQUERADE
/sbin/iptables -A FORWARD -i eth0 -o ppp0 -s 10.100.0.1/255.255.0.0 -j
ACCEPT
/sbin/iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables: No chain/target/match by that name
/sbin/iptables -A OUTPUT -j ACCEPT -o lo
/sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 255.255.255.255/32
/sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 10.100.0.1/255.255.0.0
/sbin/iptables -A OUTPUT -j ACCEPT -o eth0 -d 224.0.0.0/4 -p ! tcp
/sbin/iptables -A FORWARD -j LOG -o ppp0 -d 10.100.0.1/255.255.0.0
iptables: No chain/target/match by that name
/sbin/iptables -A FORWARD -j DROP -o ppp0 -d 10.100.0.1/255.255.0.0
/sbin/iptables -A OUTPUT -j LOG -o ppp0 -d 10.100.0.1/255.255.0.0
iptables: No chain/target/match by that name
/sbin/iptables -A OUTPUT -j DROP -o ppp0 -d 10.100.0.1/255.255.0.0
/sbin/iptables -A OUTPUT -j ACCEPT -o ppp0 -d 255.255.255.255/32
/sbin/iptables -A OUTPUT -j ACCEPT -o ppp0 -s 194.219.142.142/32
echo "1" > /proc/sys/net/ipv4/ip_forward
/sbin/iptables -A INPUT -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0
iptables: No chain/target/match by that name
/sbin/iptables -A INPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0
/sbin/iptables -A OUTPUT -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0
iptables: No chain/target/match by that name
/sbin/iptables -A OUTPUT -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0
/sbin/iptables -A FORWARD -j LOG -s 0.0.0.0/0 -d 0.0.0.0/0
iptables: No chain/target/match by that name
/sbin/iptables -A FORWARD -j DROP -s 0.0.0.0/0 -d 0.0.0.0/0
router:/usr/src/linux#
hope this will help you help me :-)
Mihalis.
--
09:40:09 up 1:21, 2 users, load average: 0.31, 0.42, 0.20
Reply to: