IPTABLES. Tried everything. Any suggestions appreciated

Running RH 7.1. Compiled Kernel 2.4.20 with FreeSwan. No
imcompatible packages installed, at least none that I know of.
Modules seem to be loading. I have disabled ipchains. Fast Packing
switching and advanced routing not added to kernel. I can reach hosts
on the 10.10.10.0 net. Cannot make the next hop to the Internet. For
some reason, when I rebooted a PC on eth1 net, 1 packet register in
the nat table. Linux box can reach the Internet. Any suggestions
would be appreciated.


eth1---------Linux--------eth0----------------Router
192.168.0.0/24 10.10.10.0/24


iptables -t nat -A POSTROUTING -o eth0 -s 192.168.0.0/24 -j SNAT
--to-source 10.10.10.16


iptables -t nat -L -v
Chain PREROUTING (policy ACCEPT 350 packets, 31115 bytes)
pkts bytes target prot opt in out source
destination

Chain POSTROUTING (policy ACCEPT 14 packets, 873 bytes)
pkts bytes target prot opt in out source
destination
1 76 SNAT all -- any eth0 192.168.0.0/24
anywhere to:10.10.10.16

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source
destination

Module Size Used by
iptable_filter 1728 0 (autoclean) (unused)
iptable_nat 22896 1 (autoclean)
ip_conntrack 30144 1 (autoclean) [iptable_nat]
ip_tables 15360 4 [iptable_filter iptable_nat]

Jerry Nezlick wrote:
> Running RH 7.1. Compiled Kernel 2.4.20 with FreeSwan. No
> imcompatible packages installed, at least none that I know of.
> Modules seem to be loading. I have disabled ipchains. Fast Packing
> switching and advanced routing not added to kernel. I can reach hosts
> on the 10.10.10.0 net. Cannot make the next hop to the Internet. For
> some reason, when I rebooted a PC on eth1 net, 1 packet register in
> the nat table. Linux box can reach the Internet. Any suggestions
> would be appreciated.
>

you sure did allow ip_forward to the kernel?

echo 1 > /proc/sys/net/ipv4/ip_forward

best,
peter

--
http://www2.goldfisch.at/know_list
http://leblogsportif.sportnation.at

Shutdown IPSec and NAT started working. I guess I need to look at my
FreeSwan config more carefully.