[WBEL-users] iptables

bishop bishop@platypus.bc.ca
Fri, 17 Sep 2004 01:54:09 -0700


Nayana Hettiarachchi wrote:

> Hey guys,
> 
> i am just playing around with a box with 2 NICs and trying to setup a router
> 
> eth0 on 192.168.0.0/24 and eth1 on 192.168.5.0/24
> 
> i [set up] Ipforwarding and [set up] a chain in iptables to forward to both sides, 
> 
> 
> [root@lw01 root]# iptables -L
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination
> 
> Chain FORWARD (policy ACCEPT)
> target     prot opt source               destination
> ACCEPT     all  --  192.168.0.0/24       192.168.5.0/24
> ACCEPT     all  --  192.168.5.0/24       192.168.0.0/24
> 
> Chain OUTPUT (policy ACCEPT)
> target     prot opt source               destination

Please show us 'iptables-save'.

Please show us 'grep forward /etc/sysctl.conf'.

> i am trying to ping from 192.168.0.2 to 192.168.5.201 and i am not
> getting a ping reply,
> 
> when i do a tcpdump on the router box i can see the requests being forwarded
> 
> [root@lw01 root]# tcpdump
> tcpdump: listening on eth0
> 20:21:02.407612 192.168.0.2 > 192.168.5.201: icmp: echo request
> 20:21:07.413741 192.168.0.2 > 192.168.5.201: icmp: echo request
> 
> and if i do a tcpdump on 5.201 i see the requests [coming] and a reply
> is being sent, but i dont see that reply on the router[;] any idea ?