Networking Forums

Networking Forums > Computer Networking > Linux Networking > Strange problem with IPTables

Reply
Thread Tools Display Modes

Strange problem with IPTables

 
 
Mike Baroukh
Guest
Posts: n/a

 
      10-23-2004, 10:03 PM
Hi all.

I use iptables for 2 years an I thought I was able to resolv any
problem but I can't understand this one.

I use a Debian as a gateway for another machine at home.
Kernel is 2.6.7.
eth0 is inside my network.
ppp0 is my internet connection.

The gateway machine have absolutly no problem : Eveything is fine.
The other machine CAN ONLY ACCESS GOOGLE !!!!!
No other site is working !

I used tcpflow to see what happend when my internal machine try to
access internet : I can see the post, but no reply.
More : the question is asked 3 times but it is only sent once by the
machine.
I tried by hand :

telnet 10.0.0.1
Trying 195.42.251.40...
Connected to www.fnac.com.
Escape character is '^]'.
GET / HTTP/1.0
Host: www.yahoo.com

And I see, on the tcpflow :

010.000.020.099.32782-216.109.118.074.00080: GET / HTTP/1.0
010.000.020.099.32782-216.109.118.074.00080: Host: www.yahoo.com
010.000.020.099.32782-216.109.118.074.00080: Host: www.yahoo.com
010.000.020.099.32782-216.109.118.074.00080: Host: www.yahoo.com
216.109.118.074.00080-010.000.020.099.32782: b>Shop</b></font></td><td
colspan=2><font face=a

216.109.118.74 is really yahoo :
;; ANSWER SECTION:
74.118.109.216.in-addr.arpa. 924 IN PTR p11.www.dcn.yahoo.com.


More infos :
ip forward is activated in /etc/network/options.
rules are :

*nat
-A POSTROUTING -o ppp0 -j MASQUERADE
COMMIT
*filter
-A INPUT -i eth0 -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A INPUT -i ppp0 -m state --state ESTABLISHED,RELATED -j ACCEPT
-A OUTPUT -o ppp0 -j ACCEPT
-A FORWARD -i ppp0 -o eth0 -m state --state ESTABLISHED,RELATED -j
ACCEPT



I really don't understand what happen.
Can any body help or will I become crazy ?

Thenks in advance for any help.

Mike
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strange dropped packages - guarddog/iptables Paulo da Silva Linux Networking 3 09-18-2009 05:27 PM
iptables strange problem paranic Linux Networking 6 03-14-2006 10:58 PM
bridging and iptables -- strange behaviour beau Linux Networking 3 02-05-2006 08:09 PM
Strange behavior using IPTables / Squid / Windows Clients. John Jr Linux Networking 0 01-13-2005 08:26 PM
Strange network timeouts on iptables-firewall toupeira Linux Networking 3 10-19-2004 12:16 AM



1 2 3 4 5 6 7 8 9 10 11