Michael Brown wrote:
Hi all,

At the moment I've got a bunch of windows desktops set up on a numericlinkwarning 10.0.9.0 <http://10.0.9.0> subnet. They all connect into a switch which is connected into a linux router running iptables and ipmasq. This router is then connected to another switch on the numericlinkwarning 10.0.1.0 <http://10.0.1.0> subnet. There is another router on this subnet which is only accepting connections from machines on its own subnet.

I need machines on the .9 subnet to be able to talk to this router as if they were on the .1 subnet.

Am I right in thinking that this what IPMASQ is for? It will masquerade the ip's on the .9 subnet and make it look like they are all coming from a single ip on the .1 subnet?

I'm not all that familiar with ipmasq, so I'm not sure what the commands to achieve the above would be.

I've tried:
iptables -I FORWARD -p tcp -s numericlinkwarning 10.0.9.0/24 <http://10.0.9.0/24> -d numericlinkwarning 10.0.1.7 <http://10.0.1.7> --dport 80 -j MASQUERADE

But I get:
iptables: Target problem

I also tried forwarding without masquerading and that didn't work either?

Any ideas?

Show us the output of

#cat /proc/sys/net/ipv4/ip_forward     (and/or)
#cat /proc/sys/net/ipv6/ip_forward

O Plameras


--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to