[mdlug] iptables question

Robert Meier eaglecoach at wwnet.com
Thu Mar 22 08:14:25 EDT 2007


David,

I haven't used iptables(8) directly for several years,
and no longer have it installed.
I have been using YAST firewall.

<HINT>
After reading the man page, I believe it is complaining that:
      1. It can't find the nat table. -or-
      2. It can't find the masq_eth1 chain. -or-
      3. It can't find output device eth1. -or-
      4. It can't find rule MASQUERADE.

You can list the chains and their rules (2 and 4) with

    bash> iptables -L

The nat table (1) is a product of your kernel,
so if the nat table was there,
it should still be there until you change your kernel.

  "MASQUERADE
       This target is  only  valid  in  the  nat  table,  in  the
       POSTROUTING  chain.   It  should only be used with dynami­
       cally assigned IP (dialup)  connections:  if  you  have  a
       static  IP  address, you should use the SNAT target.  Mas­
       querading is equivalent to specifying a mapping to the  IP
       address of the interface the packet is going out, but also
       has the effect that connections  are  forgotten  when  the
       interface  goes  down.   This is the correct behavior when
       the next dialup is unlikely to  have  the  same  interface
       address  (and  hence  any established connections are lost
       anyway).  ..."
		 -- iptable(8)
See iptable(8) for further details.
</HINT>

Hopefully helpful,
-- 
Dr. Robert J. Meier



More information about the mdlug mailing list