From: Ralf Spenneberg <lists@spenneberg.org>
To: Thomas Wallrafen <mails@ranulf.de>
Cc: Netfilter <netfilter@lists.netfilter.org>
Subject: Re: [DNAT] Disappearing Packets
Date: 10 Oct 2003 12:20:03 +0200 [thread overview]
Message-ID: <1065781203.1650.106.camel@kermit> (raw)
In-Reply-To: <20031010085214.GA8722@jesus.fsmpi.rwth-aachen.de>
Hi Thomas,
Am Fre, 2003-10-10 um 10.52 schrieb Thomas Wallrafen:
> I'm currently setting up an IPtables firewall using DNAT to access our
> Webserver (192.168.0.42) and Masquerading to allow Internet access to
> the clients.
>
> Packets to the firewall (137.226.171.XXX) on port 80 can pass the FORWARD-chain:
> (already DNATed...)
> Oct 10 11:47:24 wormhole kernel: IN=eth0 OUT=eth1 SRC=170.252.80.XXX
> DST=192.168.0.42 LEN=64 TOS=0x00 PREC=0x00 TTL=47 ID=39702 DF PROTO=TCP
> SPT=48785 DPT=80 WINDOW=16384 RES=0x00 SYN URGP=0
Are you sure the packets get lost? What happens when you run tcpdump on
the internal interface of the firewall?
Can you run tcpdump on the webserver?
Does the webserver have a default gateway set pointing to the firewall?
Can you post your rules?
Does the internet access for the clients work?
Cheers,
Ralf
--
Ralf Spenneberg
RHCE, RHCX
Book: Intrusion Detection für Linux Server http://www.spenneberg.com
IPsec-Howto http://www.ipsec-howto.org
Honeynet Project Mirror: http://honeynet.spenneberg.org
prev parent reply other threads:[~2003-10-10 10:20 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-10-10 8:52 [DNAT] Disappearing Packets Thomas Wallrafen
2003-10-10 9:17 ` Amendment: " Thomas Wallrafen
2003-10-10 10:20 ` Ralf Spenneberg [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1065781203.1650.106.camel@kermit \
--to=lists@spenneberg.org \
--cc=mails@ranulf.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.