Michael Brown wrote:
Hi all,
At the moment I've got a bunch of windows desktops set up on a
numericlinkwarning 10.0.9.0 <http://10.0.9.0> subnet. They all connect
into a switch which is connected into a linux router running iptables
and ipmasq.
This router is then connected to another switch on the
numericlinkwarning 10.0.1.0 <http://10.0.1.0> subnet.
There is another router on this subnet which is only accepting
connections from machines on its own subnet.
I need machines on the .9 subnet to be able to talk to this router as
if they were on the .1 subnet.
Am I right in thinking that this what IPMASQ is for? It will
masquerade the ip's on the .9 subnet and make it look like they are
all coming from a single ip on the .1 subnet?
I'm not all that familiar with ipmasq, so I'm not sure what the
commands to achieve the above would be.
I've tried:
iptables -I FORWARD -p tcp -s numericlinkwarning 10.0.9.0/24
<http://10.0.9.0/24> -d numericlinkwarning 10.0.1.7 <http://10.0.1.7>
--dport 80 -j MASQUERADE
But I get:
iptables: Target problem
I also tried forwarding without masquerading and that didn't work either?
Any ideas?
Show us the output of
#cat /proc/sys/net/ipv4/ip_forward (and/or)
#cat /proc/sys/net/ipv6/ip_forward
O Plameras
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html