jeffbuttars Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
![](images/avatars/16562936594032f40226b0a.jpg)
Joined: 23 May 2003 Posts: 79 Location: Boise, ID
|
Posted: Thu Jun 24, 2004 5:42 am Post subject: Strange forwarding problem |
|
|
I have firewall setup with two nics.
eth0 is a static ip x.x.x.53 netmask x.x.x.248
eth1 is internal ip 192.168.0.1 netmask 192.168.0.0
I'm using iptables to setup a simple firewall and SNAT
EXTIF=eth0
$IPTABLES -t filter -A FORWARD -i! $EXTIF -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -t filter -A FORWARD -i $EXTIF -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -t filter -A FORWARD -i $EXTIF -m state --state NEW,INVALID -j DROP
$IPTABLES -t nat -A POSTROUTING -o $EXTIF -s 192.168.0.0/255.255.0.0 -j SNAT --to-source x.x.x.53
The problem:
On fresh boot the firewall will not forward packets from eth1 to eth0.
From the internal network I can ssh to eth1 on the firewall and restart the internal network
/etc/init.d/net.eth1 restart
and then everything will forward through and work like it's supposed to.
Right after boot, before restarting eth1 to make things forward,
/proc/sys/net/ipv4/conf/all/forwarding
/proc/sys/net/ipv4/ip_forward
are both '1'
I'm running dncpd and it functions just fine.
I'm lost. |
|