Search This Blog

Wednesday, September 12, 2007

Re: NAT problems

Hello,

Carlos Pasqualini - SETI Soluciones Informáticas a écrit :
>
> i'm working with debian since potato, i had a lots of firewalls but...
> now with lenny i execute my script and it didn't work well (or it didn't
> work at all ough!)
>
> what changed from kernel 2.6.18 / iptales 1.3.6 to kernel
> 2.6.22 /iptables 1.3.8 ????

A new NAT framework alternative (nf_nat) was introduced in kernel 2.6.20
in addition to the new IPv4+IPv6 conntrack framework alternative
(nf_conntrack) that was introduced in kernel 2.6.15. The old IPv4-only
conntrack+NAT framework (ip_conntrack+ip_nat) was removed from kernel
2.6.22. Many configuration options related to iptables, connection
tracking and NAT changed location and name.

> a simple syntax as
> # iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
> seems not to work well

Can you elaborate ?

> if someone knows about important changes about etch/lenny i will
> aprreciate links to documentation about them

Where does your kernel come from ? Is it a precompiled Debian package or
did you build it from the source ? AFAIK, the latest kernel version in
lenny is 2.6.21.


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

No comments: