Connection throught iptables NAT keep disconnects after

[kamracik]

Helo,


I have a problem with iptables NAT, with it host gives internet acces to guest (virtual server).

Got rules like:
*nat
-A PREROUTING -d 10.0.2.41 -j DNAT --to-destination 179.16.15.2
-A POSTROUTING -s 179.16.15.0/24 -j SNAT --to-source 10.0.2.41
*filter
-A INPUT -i tap0 -s 179.16.15.0/24 -d 10.0.0.0/8 -j DROP
-A INPUT -i tap0 -s 179.16.15.0/24 -d 179.16.15.1 -j DROP
-A INPUT -i tap0 -s 179.16.15.0/24 -j ACCEPT
-A INPUT -d 179.16.15.2 -j ACCEPT

Nat is between virtual interface eth1:1 and tap0, don't ask why but it's working
that way, also I have tried with physical interfaces but with same results.

Everything is working except that I'm disconnected from guest console (ssh) after long output like links, ls -lha or even mc.
Randomly i can use long output but rarly.

syslog and dmesg are clean, similar tcpdump does show nothing.

I found same problem here:
http://serverfault.com/questions/255183/iptables-forwarding-frequently-disconnecting/338093#338093
But without solution.

[chiefbag]

Try the following setting on the client machine.

[Hu]

Please post the output of iptables-save -c ; /sbin/ip a; /sbin/ip r from the host and guest.

[kamracik]

Traffic flow looks like
Host dedicated virtual interface 10.0.2.41/24
Host tap interface 179.16.15.1/24
Guest interface 179.16.15.2/24

->10.0.2.41->179.16.15.2

Iptables rules from host, guest for purpose of this problem doesn't have any kind of rule set.
Below i change ports to 1234 for security reasons and masks not relative to problem ips with description in comments