[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] SNAT question


  • Subject: Re: [Openvpn-users] SNAT question
  • From: Denis Jedig <dj@xxxxxxxxxxxx>
  • Date: Sat, 3 Mar 2007 11:49:01 +0100

On Fri, 02 Mar 2007 20:05:41 +0100 Asier Baranguán wrote:

> iptables -t nat -A POSTROUTING -i tun0 -j SNAT --to 192.168.48.2

No "-i" in POSTROUTING rules - this information is not available any more
at this stage.

> iptables -t nat -A POSTROUTING --source 10.20.10.0/24 -j SNAT --to 192.168.48.2

This should work. Possibly, you were somewhat inpatient when testing - for
a connection to become SNATted, it has to be recognized as "new" by
netfilter. Add the rule first, run your tests (pings I assume) afterwards.
And do not forget to echo "1" > /proc/sys/net/ipv4/ip_forward.

-- 
Denis Jedig
syneticon networks GbR             http://syneticon.net/service/

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users