Hi

I'm following this(https://www.jool.mx/en/run-vanilla.html) guide. IPTables mode working, but netfilter mode doesn't work. What am I missing? or is this a bug?


jool_siit -V
4.0.6.2 i386

ip{6}tables -V
v1.6.0 i386

uname -rm
3.16.76-4.custom x86_64


PC1[eth0] <=>[eth1]Tranlator[eth2]<=>[eth0]PC2


#PC1
ip addr add 10.200.200.220/23 dev eth0
ip route add 10.100.100.0/24 via 10.200.200.16

#Translator
ip addr add 10.200.200.16/23 dev eth1
ip addr add 2001:db8:a::10.100.100.2/120 dev eth2

sysctl -w net.ipv4.conf.all.forwarding=1
sysctl -w net.ipv6.conf.all.forwarding=1


ethtool --offload eth1 gro off
ethtool --offload eth2 gro off

lro already fixed off by kernel.


jool_siit instance add default --netfilter --pool6 2001:db8:a::/96


#PC2
ip add add 2001:db8:a::10.100.100.11/120 dev eth0
ip route add 2001:db8:a::10.200.200.0/119 via 2001:db8:a::10.100.100.2



#Result of netfilter (on Translator)

PC1>PC2
12:44:12.234494 IP 10.200.200.220 > 10.100.100.11: ICMP echo request, id 9806, seq 1, length 64 12:44:12.234647 IP 10.200.200.16 > 10.200.200.220: ICMP net 10.100.100.11 unreachable, length 92 12:44:13.255748 IP 10.200.200.220 > 10.100.100.11: ICMP echo request, id 9806, seq 2, length 64 12:44:13.255825 IP 10.200.200.16 > 10.200.200.220: ICMP net 10.100.100.11 unreachable, length 92 12:44:14.279628 IP 10.200.200.220 > 10.100.100.11: ICMP echo request, id 9806, seq 3, length 64 12:44:14.279704 IP 10.200.200.16 > 10.200.200.220: ICMP net 10.100.100.11 unreachable, length 92



-- Fatih USTA
_______________________________________________
Jool-list mailing list
[email protected]
https://mail-lists.nic.mx/listas/listinfo/jool-list

Reply via email to