rafaelweingartner commented on issue #2514: [CLOUDSTACK-10346] Problem with NAT configuration and VMs not accessing each other via public IPs URL: https://github.com/apache/cloudstack/pull/2514#issuecomment-382459118 What do you mean by "SNAT"? Are you referring to "enable static NAT" feature in ACS? This PR is **NOT** addressed to this feature(SNAT). If I enable static NAT, then everything is fine here. What I am addressing here is the NAT for a public IP that I allocate for a VPC. That is probably why my rules are different: ``` root@r-1186-VM:~# iptables-save | grep MARK -A PREROUTING -i eth2 -m state --state RELATED,ESTABLISHED -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff -A PREROUTING -i eth1 -m state --state NEW -j CONNMARK --set-xmark 0x1/0xffffffff ``` Then, I executed the command as you suggested. ``` iptables -t mangle -D PREROUTING -i eth1 -m state --state NEW -j CONNMARK --set-xmark 0x1/0xffffffff ``` The result after that command: ``` root@r-1186-VM:~# iptables-save | grep MARK -A PREROUTING -i eth2 -m state --state RELATED,ESTABLISHED -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff ``` I then tried the SSH, and it did not work. Of course, to executed the test, I removed
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
