IPTABLES: ip forwarding/masquerading problems

my current rules (for testing purposes) are:
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -A FORWARD -i eth0 -j ACCEPT
iptables -A FORWARD -i eth1 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
with ip_forwarding enabled (echo 1 > /proc/sys/net/ipv4/ip_forward)
eth0 is 121.212.12.16/28 IP: 121.212.12.30
eth1 is 192.168.2.0/24 IP: 192.168.2.148
eth0 is the internal network
eth1 goes out to the external network
i cannot for the life of me get any packets to forward. I have iptables.rules saved in /etc/iptables/iptables.rules, and have run /etc/rc.d/iptables restart everytime I update my rules.
I have no idea where to go from here. I can access each network individually from each interface, but i can not get the two interfaces to see each other.

iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
Your forward rules had no destinations specified.
Give that a whirl
in your statement, you said that eth0 was the internal network, but you list an external routable ip for eth0, and an internal ip for eth1. I went based off the ip information, with eth0 being the external network, and eth1 being your internal (masqueraded) network.
if the masquerade target is not working for some reason, you could try the SNAT target...
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 192.168.2.148
Also, make sure your clients behind eth1 know that the gateway is 192.168.2.148 then, as some clients assume that a gateway for a given network is the first available address..in this case it would be 192.168.2.1

Similar Messages

  • Ssh forwarded glx problem with older servers

    Hi,
    I've recently started having problems with displaying OpenGL apps forwarded through an ssh session to an SGI Altix. It seems like it might be an upgrade problem that has also been observed on Ubuntu:
    https://bugs.launchpad.net/ubuntu/+sour … bug/384001
    Has anyone experienced similar difficulties or have a potential workaround?
    I'm running the opensource xorg-video-ati drivers and have tried with DRI as well as software rendering.
    Regards,
    Alex

    Bah. The discussion board nuked the ascii formatting.
    The short version of the problem is that in the ssh banner, a single backslash is displayed as two backslashes in the terminal.
    Message was edited by: Jans Carton

  • Jsp:forward URL problem

    Hi,
    I have 2 pages X.jsp and Y.jsp
    The content of X.jsp is a simple
    // send an email here
    <jsp:forward page="Y.jsp">
    </jsp:forward>
    The content of Y.jsp is only "Mail is sent" message.
    The problem is that everytime page X is loaded,
    the browser displays Y.jsp content, but the URL in the Address box of the browser still displays X.jsp
    This leads me to reload problem, even though the page displays the "Mail is sent" message, the URL still shows X.jsp, and everytime the browser is reloaded, another mail is sent.
    How to make the URL change to Y.jsp ?
    TIA.

    Hi,
    I have 2 pages X.jsp and Y.jsp
    The content of X.jsp is a simple
    // send an email here
    <jsp:forward page="Y.jsp">
    </jsp:forward>
    The content of Y.jsp is only "Mail is sent" message.
    The problem is that everytime page X is loaded,
    the browser displays Y.jsp content, but the URL in the
    Address box of the browser still displays X.jsp
    This leads me to reload problem, even though the page
    displays the "Mail is sent" message, the URL still
    shows X.jsp, and everytime the browser is reloaded,
    another mail is sent.
    How to make the URL change to Y.jsp ?
    TIA.Thats the natural behavious of forward.
    One simple solution is not to use forward. You can use HTTP redirection rather than forward.
    Hope it helps.

  • ARQ: Risk Mitigation Mandatory and Request Forward causing problem???

    Hi,
    I have a scenario where in, at a certain stage, "Risk Mitigation" is made mandatory and also "Forward Request" option is available at this stage for the same approver.
    What is happening is that, when this approver tries to approve the request without mitigating the risks, it gives error message and request can not be approved. This is fine and going as per the configuration.
    Now the same approver is trying to forward the request to some other person for some business reasons (with "WITH RETURN" check box checked and disabled). This request is reaching to the desired recipient as expected. But the problem is that, when after providing his comments (a business requirement before mitigating risks, if need be) if he tries to approve (submit) the request, application gives the same error message that: "Request can not be submitted. Mitigate Risk XYZ"!
    Due to this, request can not be submitted and sent back to main approver! I noticed that, the request still lies on the same stage and the same stage configuration is being considered for this forwardee too!
    This is keeping the request hanging as this forwadee is not authorized to mitigate the risks.
    Can any one please help me resolve this?
    Regards,
    Faisal

    Alessandro,
    Thanks for your reply.
    Now I see (as confirmed) that we have technical limitation or application design that when we forward a request, it DOES NOT change the stage (even I noticed this). So I was thinking that only we have "SUBMIT" button to send it back to the main approver.
    But as you said, this forwardee can use the same "Forward Request" option instead of "Submit" button. This looks the option here which suits the situation.
    But can you please tell me if we can do something to inform the forwardee that he must select "Forward Request" option and not Submit button?
    Because, this submit button is visible and he can click it without knowing! And then this error message of Mandatory risk analysis then appears!
    Is there any work around?
    Please advise.
    Regards,
    Faisal

  • Spry Image Slideshow with Filmstrip IE8 Play/Back/Forward Arrows Problem

    Please help me. I'm using the Spry Image Slideshow with Filmstrip widget on my web page: http://new.radcal.com/accugold2.html#sensoroptabs. In Firefox, Safari, Internet Explorer 9 it displays properly but in Internet Explorer 8 the gray Play/Back/Forward Arrows automatically appear on the Viewport (main large slide area) when the page loads and they do not go away, ever. Whereas in the other browsers these arrows only show up when I move my mouse into the viewport area and go away as soon as I take my mouse off the viewport area.
    I need the arrows to behave in IE8 like they do in IE9, Firefox, etc. I do not know javascript but I imagine there is some javascript code that could solve this problem. Does anyone know of a solution? Please help me...

    At the top of your document you have
    <html>
    <!-- DW6 -->
    <head>
    Add the DOCTYPE as follows
    <!DOCTYPE HTML>
    <html>
    <!-- DW6 -->
    <head>
    Without a DOCTYPE on the very first line of the document, IE goes into Quirks Mode
    Gramps
    PS Normally I do not monitor this forum, hence this reply after having received your PM

  • WRT54G v.3 Port Forwarding Reset Problem

    I have a Linksys WRT54G and I've had it for well over 3 years. I've been using another Wired router as a DHCP server and only used the wireless router for wireless access.
    But recently, I took the wired router away and began using the WRT54G. I set up everything correctly including Port Forwarding, but the strange thing is that whenever I reboot my computer, the port forwarding service stops. If I enable it, disable it or do anything else, it still won't work.
    The only way to fix this problem is to 'Reset Factory Settings' every time, but it gets really frustrating doing it every day. Has anyone else had this issue? P.S. - I have the latest firmware.
    Message Edited by DaLink on 02-07-2008 03:30 PM

    Checking back after 1 month, I still have this problem, no workaround found. Can anyone lend a hand?

  • Anyone else having this fast forward/rewind problem?

    So i noticed since the update from 6 to 6.0.1, that when the library is in the miniplayer, minimized player mode, I cant fast forward or rewind with the buttons in the window. I hit the button and the song will skip forward a blip, then its like i let go of the mouse (let off the button) but I didnt, am I the only one with this problem, anyone have any idea what to do?

    same here..after updating my version to 5.0 i cant forward or rewind my media files ...it has become toooo slow...it worked great when software versio was 4.6...but now i dnt what has haappnd....i saw my friends blackberry bold with software version 5.0 and it was working fine in his phone...i dnt whts the matter ...but finally we hve to accept it.. 

  • RTSP steaming Port Forward (?) problems with 4 (four) WVC54GCA cameras on WRT54G v2 router.

    I am having difficulties correctly setting up my four (4) WVC54GCA cameras on a WRT54G v2 router to make them stream RTSP videos that I can view on my BlackBerry Bold. I can access the cameras from the internet, through  
    http://CAM1_SubDomain.Linksys-Cam.com/1024  
    http://CAM2_SubDomain.Linksys-Cam.com/1025 
    http://CAM3_SubDomain.Linksys-Cam.com/1026
    http://CAM4_SubDomain.Linksys-Cam.com/1027 
    so that part works fine.
    All the 4 cameras are set up with static IP addresses.
    The default RTSP port 554 and RTP Data port at 5000 are forwarded to CAM1 IP address. I can access CAM1 RTSP feed on my Blackberry Bold (and also on a good old Samsung SGH-A706 cell phone).  
    CAM 1 Settings:
    STATIC IP: 192.168.1.201
    Alternate HTTP Port: 1024 à Forwarded to 192.168.1.201
    RTSP Port: 554 à Forwarded to 192.168.1.201
    RTSP Data Port: 5000 à Forwarded to 192.168.1.201
    RTSP access on cell phone WORKS only with the following format: rtsp://CAM1_SubDomain.Linksys-Cam.com/1111, where 1111 is the access code. 
    CAM 2 Settings:
    STATIC IP: 192.168.1.202
    Alternate HTTP Port: 1025 à Forwarded to 192.168.1.202
    RTSP Port: 1029 à Forwarded to 192.168.1.202
    RTSP Data Port: NOT SURE IF I NEED TO FORWARD ONE, HELP PLEASE
    Despite I have a dedicated subdomain for each camera from TZO, the following link DOESN’T WORK 
    rtsp://CAM2_SubDomain.Linksys-Cam.com/1111, where 1111 is the access code.
    Actually, when I enter the above link, the cellphone brings in the feed from CAM1, I guess due to the identical access code with CAM2. Once I change the access code for CAM2, it doesn’t’t show any feed. 
    CAM 3 Settings:
    STATIC IP: 192.168.1.203
    Alternate HTTP Port: 1026 à Forwarded to 192.168.1.203
    RTSP Port: 1030 à Forwarded to 192.168.1.203
    RTSP Data Port: NOT SURE IF I NEED TO FORWARD ONE HELP PLESE
    Despite I have a dedicated subdomain for each camera from TZO, the following link DOESN’T WORK 
    rtsp://CAM3_SubDomain.Linksys-Cam.com/1111, where 1111 is the access code. This feed also brings in CAM1.  
    CAM 4 Settings:
    STATIC IP: 192.168.1.204
    Alternate HTTP Port: 1027 à Forwarded to 192.168.1.204
    RTSP Port: 1031 à Forwarded to 192.168.1.203
    RTSP Data Port: NOT SURE IF I NEED TO FORWARD ONE HELP PLEASE
    Despite I have a dedicated subdomain for each camera from TZO, the following link DOESN’T WORK 
    rtsp://CAM4_SubDomain.Linksys-Cam.com/1111, where 1111 is the access code. This feed also brings in CAM1
    DMZ could probably fix the problem for a second camera, but not for all four CAMs
    OS: XP SP2  
    Question 1: Any idea how can I get all the four cameras RTSP feed on my cell/BlackBerry?
    Question 2: I am running out of Port Range forwards. Should I add more port forwards, I have only one more shot. Any workaround? 
    Each and every help idea is greatly appreciated!

    I have six of these cams and used the tutorial and review at http://www.Myhomserver.com for help.  First thing, set ALL the RTSP access codes the SAME, so all you need to do is increment the port for each cam
    Cam 1 - 192.168.1.200 - set at port 80 TCP - RTSP port default at 554, forward port 5000 UDP/TCP and the RTSP access code 12345
    Cam 2 - 192.168.1.201 - set at port 1024 TCP - RTSP port at 1029, forward port 5001 UDP/TCP and the RTSP access code 12345
    Cam 3 - 192.168.1.202 - set at port 1025 TCP - RTSP port at 1030, forward port 5002 UDP/TCP and the RTSP access code 12345
    Cam 4 - 192.168.1.203 - set at port 1026 TCP - RTSP port at 1031, forward port 5003 UDP/TCP and the RTSP access code 12345
    Cam 5 - 192.168.1.204 - set at port 1027 TCP - RTSP port at 1032, forward port 5004 UDP/TCP and the RTSP access code 12345
    Cam 6 - 192.168.1.205 - set at port 1028 TCP - RTSP port at 1033, forward port 5005 UDP/TCP and the RTSP access code 12345
    This worked for me using the above settings....take your time, plan out the ports, all RTSP ports must be different on each cam
    Accessing CAMS can be done via your cell phone below:
    Camera 1---> RTSP://<your TZO camera domain>:554/12345
    Camera 2---> RTSP://<your TZO camera domain>:1029/12345
    Camera 3---> RTSP://<your TZO camera domain>:1030/12345
    Camera 4---> RTSP://<your TZO camera domain>:1031/12345
    Camera 5---> RTSP://<your TZO camera domain>:1032/12345
    Camera 6---> RTSP://<your TZO camera domain>:1033/12345
    http://www.MyHomeServer.com
    Linksys IP camera reviews, Tutorials and How-To's on Web & Mobile Streaming

  • Forwarding email problems

    Hey,
    I recently tried to forward an email from my gmail app off my phone, it would not send. That isn't the problem as I logged onto my computer and did it from there. But the actual issue is now I keep getting notifications almost every 30 seconds from gmail telling me it can not send the message. I tried to delete said messages and I can not do so. As well as uninstall the app and reinstall and reconfigure hoping it would have dropped the messages. No such luck. If anyone has any insight on how to correct this malfunction it would be a huge help. Thanks in advance!

    After you uninstall the gmail account, do a system cache clear and then reboot the phone before re-installing your gmail account.
    Power down phone
    Hold volume up/down & power simultaneously until you see the Boot Mode Selection Menu
    Use volume down to navigate to 'Recovery', use volume up to select
    Should see screen with triangle and exclamation point next to an Android
    Press volume up/down simultaneously to go into system recovery
    Use volume rocker to navigate to 'wipe cache' and use power button to select
    Once finished, use volume rocker to navigate to 'reboot system now' and use power button to select
    This will not erase any data or change any settings, but will clear the cache if that is where that pesky email that will not send is hiding out.

  • Endless forward calls problem

    Hi,
              I am using WLS6.1 SP2 + Apache.
              I'm getting in a servlet a request that the sessionid is in the parameter.
              /servlet/Foo?sessionid=1234&param=abc
              The Foo servlet is checking in the beginning of its service() if the
              seesionid paramater exists. If it exists, it forwards
              the request to the same servlet, where the sessionid is encoded in the url.
              /servlet/Foo;sessionid=1234?param=abc
              The result I got is endless request calls until the server dies.
              It seems to me that the sessionid parameter is found in the forward requests
              even though the url I used for the forward call does not.
              This feature work fine on Tomcat and iPlanet... I have the problem only on
              WLS.
              Does anyone know why I got this behavior and how to prevent it ?
              Thanks,
              Eyal.
              

    i dont think you can modify the request parameter string when you do a
              forward
              So even though you think you are changing the request, the servlet still
              sees the original request and hence the endless loop? Perhaps you could
              output the query string in the service method or something?
              If you want to change the query string then i think you may need to use
              sendRedirect()
              I cant quite remember but you may be able to get the desired results by
              using a filter. You may be able to modify the query string before the
              servlet sees it if you do it in a filter? Not sure.
              "Eyal H" <[email protected]> wrote in message
              news:[email protected]...
              > Hi,
              >
              > I am using WLS6.1 SP2 + Apache.
              >
              > I'm getting in a servlet a request that the sessionid is in the parameter.
              >
              > /servlet/Foo?sessionid=1234&param=abc
              >
              > The Foo servlet is checking in the beginning of its service() if the
              > seesionid paramater exists. If it exists, it forwards
              > the request to the same servlet, where the sessionid is encoded in the
              url.
              >
              > /servlet/Foo;sessionid=1234?param=abc
              >
              > The result I got is endless request calls until the server dies.
              > It seems to me that the sessionid parameter is found in the forward
              requests
              > even though the url I used for the forward call does not.
              >
              > This feature work fine on Tomcat and iPlanet... I have the problem only on
              > WLS.
              >
              > Does anyone know why I got this behavior and how to prevent it ?
              >
              > Thanks,
              > Eyal.
              >
              >
              >
              

  • UWL: Forwarding Task problem

    Hi experts,
    When i'm trying to forward a task which is part of a workflow. I don't get the possibility to add a note to the task (in the forwarding task screen). when I create a new task in the Uwl and then forward the note field does appear.
    Is there somebody who can help me with this?
    thanks in advance.
    points will be awarded for every helpful answer
    Kurt Ranft

    Same problem here.
    Have already set the "Delta Pull Channel Snapshot Refresh Period" to "-1".  From the documentation, this is so that everytime the user logs in, the UWL is refreshed immediately.  Apparently this is not so.  The bahaviour is as such.
    Say for leave work item
    - Approver go in and approves the leave and logs off immediately.
    - Approver logs in the second time and still see the same work item.  The work item is still seen even after log in the next day.  Logs off immediately.
    - Approver logs in the third time and now the UWL list is updated.
    The settings to "-1" does not seem to work.  It seems like on the second login, the portal cache is updated but the UWL is not updated immediately.  It will only be updated after a delay or subsequent log in.
    Any solutions? Am checking here first before logging an OSS.
    Cheers.
    Tan Meng Mau.

  • Forwarding Workitem Problem

    Hello Experts,
    i have a problem.
    Sometimes we forwad a workitem to another agent (from business workplace) and after this the workitem has no agent. When i read the workflow-protocol, i can see no error and the workitem seems to be correctly forwarded to the other user, but the workitem is not in the inbox of the user.
    The tasks of the Workflow are all defined as "generall Task"... so there is no error in my opinion. When i run the report SWI2_ADM1 the workitem is listed as "workitem without agent". When i run the report SWIA and forward the workitem another time to the same user, the workitem appears correctly in the inbox.
    And last but no least... this error occurs not everytime with the same workitem. Sometimes i forward a workitem and its correct, sometime (same Workflow definition, other case) it disappear.
    Has anybody an idea, whats wrong?
    Thanks in advance for your help.
    Holger Steffens

    Hi,
    this isssue sounds too weird to be caused by some customization.
    I would check OSS to see if it is acknowledged by SAP and raise a message when you dont find a solution there.
    On how to solve:
    I'm guessing it is some sort of buffer problem that is  causing it, check SM21 to see if there are any weird entries.
    Also check if /$tab and /$sync will solve your problem. Do not use these commands in production since it could disrupt an update on master data somewhere (pretty rare but still, better safe than sorry)
    Kind regards, Rob Dielemans

  • Forward all problem

    Hi there,
    I have a small problem..
    I have connected a Cme and a Callmanager together with a h323 gateway..
    This is working.. i can call from phones on the callmanager to the phones on the cme and back again...no problem...
    However...when i forward a phone on my cme to a phone on my callmanager it doesn't forward the call and gives a busy tone...
    im calling from a phone on my callmanager....
    What can this be?
    Thanks..

    Hi Chad,
    You did not miss any configuration here.This is a problem all of us have tried to answer at one point or another.Currently cfwdall is only supported for Line 1 on the phone.The only method available to cfwdall Line 2 etc. is to do it from ccmadmin or the ccmuser web access page.
    There is also a third party product called;
    IPPhone callForwarder
    This new version brings to the user the ability of defining and setting the call forwards from the IP Phone. When selecting the IP Phone callForwarder service, a menu with all available lines will appear. After selecting the line the user wishes to set the forward on, a new menu containing the forward definitions will show on screen. Only those forwarding parameters definied by the Administrator will be displayed. These parameters will show the actual forward destination. The user can then set any of these callForwards.
    From this good link;
    http://www.myvoipsource.org/index.php?option=com_content&task=view&id=47&Itemid=85
    Hope this helps!
    Rob

  • Simple forward page problem

    Hi all,
    I have simple forward page , only jump to else part can any one please told me why?
    Thank you
        <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
    <title>Empet Check</title>
    </head>
    <body>
    <%
       String name = request.getParameter("String");
       if (name != null){
       %>
          name is not null
         <jsp:forward page="ViruList1.jsp"/>
        <% }else { %>
    <jsp:forward page="Home.html"/>
    <% } %>
    </body>
    </html>
    <form name="formName" action="forward.jsp" method="post" >
    <input type="text" name="string" size="20">                               
                         <input type="submit" name="submit" value="Go"></td>

    got it

  • RSS URL forwarding/posting problem

    HI, Thanks so much. There seems to be no place on the web to address RSS concerns, and since I use Thunderbird and Firefox, I thought I would try here. Perhaps someone can shed some light on what is happening?
    I subscribed to an RSS feed
    http://www.thecitizen.co.tz/-/1765046/1765046/-/view/asFeed/-/stj0vxz/-/index.xml
    It comes into Thunderbird just fine.
    When I click a link, I can't get to the page. I can see what happens, I just don't know why nor how to stop the problem.
    Here's a representative URL
    http://thecitizen.co.tz/News/Dar-port-improvement-pact-inked/-/1840392/2452224/-/eaxrix/-/index.html
    it translates in firefox to
    http://www.thecitizen.co.tznews/Dar-port-improvement-pact-inked/-/1840392/2452224/-/eaxrix/-/index.html
    So, if I take the first link and add "www." or take the second and retype the ".tznews" to ".tz/News" -- I get this:
    http://www.thecitizen.co.tz/News/Dar-port-improvement-pact-inked/-/1840392/2452224/-/eaxrix/-/index.html
    And that works. What is going on here? Any way I can automate the adding "www." to the link so that I can just run with it? Is the RSS feed bad? or, harder question here, if I actually were in Tanzania, would it work correctly without adjustment (I'm currently USA based)?

    That is a problem with that server and needs to be fixed on their side.
    It sends a 301 Moved Permanently in the response headers with the missing '/' in the location header:
    Location: http://www.thecitizen.co.tzmagazine/sound-living/Cultural-festival-wins-revellers--hearts/-/1843780/2453266/-/79mcxyz/-/index.html
    <pre><nowiki>http://thecitizen.co.tz/magazine/sound-living/Cultural-festival-wins-revellers--hearts/-/1843780/2453266/-/79mcxyz/-/index.html
    GET /magazine/sound-living/Cultural-festival-wins-revellers--hearts/-/1843780/2453266/-/79mcxyz/-/index.html HTTP/1.1
    Host: thecitizen.co.tz
    User-Agent: Mozilla/5.0 (X11; Linux i686; rv:32.0) Gecko/20100101 Firefox/32.0
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    Accept-Language: en-US,en;q=0.5
    Accept-Encoding: gzip, deflate
    Connection: keep-alive
    HTTP/1.1 301 Moved Permanently
    Server: Apache/2.2.22 (Win32)
    Location: http://www.thecitizen.co.tzmagazine/sound-living/Cultural-festival-wins-revellers--hearts/-/1843780/2453266/-/79mcxyz/-/index.html
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Length: 322</nowiki></pre>

Maybe you are looking for

  • How do I overwrite Mail settings from my iPhone 5?

    I have a Macbook Pro running OSX 10.7.5 and have just bought an iPhone. My email address is an iCloud address [email protected] Somehow, whilst setting up the iPhone and syncing it to my Macbook Pro, the setup of my Mail (using Mail version 5.3 (1283

  • IMac intel - Can't get rid of the PPP icon on display!

    Hi there, someone please help me. I am new to apple computers, I have recently accidentally switched on a PPP connect. And it shows on the top of the screen in between AirPort and bluetooth, icon is a phone. I have deleted the PPP location, but its i

  • Function Module for WBS Status

    Hi all. ECC 6.0. I am trying to figure out a way to reach the status of a WBS element; CNJ_STAT-STTXT_INT. Does anyone know of a function module that could perhaps read this status or another way to do so? I do realize that the include FCJWBO00_STATU

  • IBAN generation in Sweden

    Hi Gurus Are companies using complex or minimum variant for Country Sweden? I have read many notes and decided to use complex variant but still facing problems with automatic IBAN generation from bank number and account number. Our company is not loc

  • Illegal Copies of Apps on Blackberry World

    Is Blackberry World regulated in any way to stop illegal copies of apps. I sideloaded a genuine  free Android app that I have had since the first version when i had an android phone. Right now there are at least two other developers who have ported i