ip masquerade

[Alexander Dalloz]

Am Mo, den 27.12.2004 schrieb alexis um 6:34:

> Trying to make ip masquerade run on my fedora core 2 two saw how to on
> this mailing list I tried everything writen but still I cannot make it
> run.this is what I've done until now.
> I want to make pc in my local network get access to the internet
> 
> eth0 get dynamic ip address from the isp
> eth1 FC2 local dhcp server (IP:192.168.1.1 GW:192.168.1.1)
> 
> I run
> iptables -t nat -A POSTROUTING -o eth0 -s 192.168.1.0/24 -j MASQUERADE
> 
> I edited  /etc/sysctl.conf setting
> net.ipv4.ip_forward = 1
> and run  "sysctl -p"(advices I saw on this mailing list)
> 
> "iptables -L -n -t nat" shows this for the POSTROUTING:
> 
> Chain POSTROUTING (policy ACCEPT)
> target prot opt source destination
> MASQUERADE all -- 192.168.1.0/24 0.0.0.0/0
> 
> But local network cannot have the internet.

The gateway host itself can access internet targets? If not, then the
problem is with the gateway host itself. If yes, then check the setup on
the client hosts: gateway (192.168.1.1), DNS (ISPs DNS if you don't have
your own on the gateway), route settings. Its an DNS issue if the NATed
hosts can reach internet hosts by IP but not by name.

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.9-1.6_FC2smp 
Serendipity 11:17:32 up 4 days, 13:01, load average: 0.39, 0.37, 0.24 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041227/e7f99284/attachment-0001.sig>