Networking Forums

Networking Forums > Computer Networking > Linux Networking > Some nat configuration problem with iptables.

Reply
Thread Tools Display Modes

Some nat configuration problem with iptables.

 
 
ChaoZhang
Guest
Posts: n/a

 
      11-26-2006, 08:20 AM
I configured iptables to support nat, the configuration just like this:
iptables -t nat -A PREROUTING -d 47.154.129.34 -p udp -m udp --dport
20002 -j DNAT --to-destination 172.16.2.145:5000
iptables -t nat -A POSTROUTING -s 47.152.0.0/255.255.0.0 -d
172.16.2.145 -p udp -m udp --dport 5000 -j SNAT --to-source 10.200.6.20


I also set ip_forward true in sysctl.conf.
the questions is:
1. In Fedora core 5, I set ip_foward true in sysctl.conf, the nat
configuration can work well. but in Fedora core 6, I did like this and
found it can't work. After I used 'echo 1 >
/proc/sys/net/ipv4/ip_forward', it began to work, why? is there
difference between them?

2. From my nat configuration, I mainly want to nat UDP packets. I have
a terminal which will connect to equipments through my linux server,
the nat can work well, the equipments will send udp packets like
heartbeat to terminal every 2 mins. But I found my linux server won't
transfer the heartbeat to terminal. I guesses the iptables won't keep
this ip-to-port map relationship too long. It will clear up some
'unused' map. If so , How can I configure it? I tried to change
'net.ipv4.netfilter.ip_conntrack_udp_timeout_strea m' and
'net.ipv4.netfilter.ip_conntrack_udp_timeout', but no useful. Someone
told me that iptables has a bug with VOIP, is this ture?

many thanks.

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IPTables configuration for SSH David Linux Networking 2 06-06-2007 08:59 AM
For Iptables configuration file KalarGyi@googlemail.com Linux Networking 3 03-24-2006 07:57 PM
iptables for IPSec (Cisco VPN) - where can I find a sample configuration? arabub Linux Networking 0 09-24-2003 04:52 PM
iptables for IPSec (Cisco VPN) - where can I find a sample configuration? arabub Linux Networking 0 09-07-2003 04:14 AM
AIM Express, squid, iptables configuration Mike Linux Networking 1 07-05-2003 03:34 PM



1 2 3 4 5 6 7 8 9 10 11