NetFiletr NAT not working /Debian

Dear all Free Software User,

I try to install a gateway for my LAN with a external 5 @IP's
(arriving on a ethernet link). first i just want nat all internal
adress to one external (1.2.3.153)

my LAN is 10.2.8.0/24
my WAN is 1.2.3.153 -> 1.2.3.157 with a external gateway 1.2.3.158

my linux bix is configure like this:

eth0 10.2.8.1
eth1 1.2.3.153

All NetFilter are insinde the kernel (Directly, no Module)
All TCP/IP and advance router are insinde the Kernel (except fast
network adresse translation)


it add the Nat rule:
> iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 1.2.3.153
it's ok, i see it with iptable -t nat -nL

I see all my route on the debian box (internal, external, external
gateway for all)

my netfilter table is the default (ACCEPT for INPUT,OUTPUT,FORWARD)

my /etc/network/options set the ip forwarding to yes


I can ping all external (www also), internal network from my debian
box

I can ping my LAN from a computer inside my LAN (10.2.8.2 with a
gateway to 10.2.8.1)

But when I try to ping external network from my internal computer:
ping 1.2.3.153 or ping 1.2.3.154:
connect: Network unreachable

So my nat is not working,

Do I miss something ?

Thanks for your help,
Guillaume

OK, I finally solve my problem:
This is my client (inside LAN), Gateway not configured ...
Sorry for the noise,

Guillaume

(E-Mail Removed) (Guillaume Riviere) wrote in message news:<(E-Mail Removed). com>...
> Dear all Free Software User,
>
> I try to install a gateway for my LAN with a external 5 @IP's
> (arriving on a ethernet link). first i just want nat all internal
> adress to one external (1.2.3.153)
>
> my LAN is 10.2.8.0/24
> my WAN is 1.2.3.153 -> 1.2.3.157 with a external gateway 1.2.3.158
>
> my linux bix is configure like this:
>
> eth0 10.2.8.1
> eth1 1.2.3.153
>
> All NetFilter are insinde the kernel (Directly, no Module)
> All TCP/IP and advance router are insinde the Kernel (except fast
> network adresse translation)
>
>
> it add the Nat rule:
> > iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 1.2.3.153
> it's ok, i see it with iptable -t nat -nL
>
> I see all my route on the debian box (internal, external, external
> gateway for all)
>
> my netfilter table is the default (ACCEPT for INPUT,OUTPUT,FORWARD)
>
> my /etc/network/options set the ip forwarding to yes
>
>
> I can ping all external (www also), internal network from my debian
> box
>
> I can ping my LAN from a computer inside my LAN (10.2.8.2 with a
> gateway to 10.2.8.1)
>
> But when I try to ping external network from my internal computer:
> ping 1.2.3.153 or ping 1.2.3.154:
> connect: Network unreachable
>
> So my nat is not working,
>
> Do I miss something ?
>
> Thanks for your help,
> Guillaume