[lug] Firewall spontaneously combusted???

[David Morris]

On Fri, Sep 10, 2004 at 05:54:40PM -0600, Kevin Fenzi wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> David>     cat 1 > /proc/sys/net/ipv4/ip_forward iptables --table nat
> David> --append POSTROUTING \ --out-interface eth1 --jump SNAT \ --to
> David> <external_ip>
> 
> David> I can run these commands on other systems and I get IP
> David> Masquerading as expected.  Just before I moved I could run it
> David> on the Sparc LX with as well and it worked there.
> 
> Odd. I don't think that would work anywhere. 
> 
> cat 1 > /proc/sys/net/ipv4/ip_forward
> 
> will cat the contents of a file called '1' into that proc file. 
> 
> Perhaps you meant to do: 
> 
> echo 1 > /proc/sys/net/ipv4/ip_forward ?

Oops, I just typed the wrong command line in the email.
Wasn't paying attention to what I was typing and was trying
to get out the door.

> Try the echo and make sure it's setting ip_forward... 
> 
> Otherwise it might be hitting another rule before the one you are
> appending to? Perhaps a deny all before that?

No other rules exist, and ip_forward is set to "1".

--David