Re: IPTable Rules... again

2012-03-09 Thread Reindl Harald
Am 09.03.2012 04:22, schrieb nu...@gmx.com: >> what you are doing wrong is change working things >> the following works perfectly (eth1: WAN, eth0: LAN) > >> iptables -A FORWARD -i eth1 -d 192.168.1.0/24 -j ACCEPT >> ipatbles -A POSTROUTING -t nat -s 192.168.1.0/24 -o eth1 -j MASQUERADE > > the

Re: IPTable Rules... again

2012-03-08 Thread nullv
>> for some reason I can't make a connection to the external mail >> server from inside the lan. even from the 10.0.0.3 address which >> should be allowed to do anything. everything used to work when i >> used MASQUERADing but stopped once i switched to SNAT. Can anybody >> help me? What am I do

Re: IPTable Rules... again

2012-03-08 Thread Reindl Harald
Am 08.03.2012 16:16, schrieb nu...@gmx.com: > for some reason I can't make a connection to the external mail > server from inside the lan. even from the 10.0.0.3 address which > should be allowed to do anything. everything used to work when i > used MASQUERADing but stopped once i switched to SNA

IPTable Rules... again

2012-03-08 Thread nullv
Hi, I have the following  rules on my router/gateway: *nat :PREROUTING ACCEPT :INPUT ACCEPT :OUTPUT ACCEPT :POSTROUTING ACCEPT -A POSTROUTING -d 93.186.25.52/32 -m comment --comment "bb" -j SNAT --to-source 41.94.39.49-41.94.39.51 -A POSTROUTING -s 10.0.0.0/8 -p tcp -m tcp --dport 53 -m com