[CentOS] iptables: forwarding on internal device

[jgimer at gmail.com]

What does your input and output chains show?

Josh

------Original Message------
From: Marcus Moeller
Sender: centos-bounces at centos.org
To: CentOS mailing list
ReplyTo: CentOS mailing list
Sent: Feb 6, 2009 11:13 AM
Subject: [CentOS] iptables: forwarding on internal device

Good Evening,

I am trying to forward packages on an internal device using iptables:

/sbin/iptables -A FORWARD -i eth0 -o eth0 -m state --state
NEW,RELATED,ESTABLISHED -j ACCEPT

but the packages are still blocked, e.g.:

Feb  6 20:58:28 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
SRC=192.168.100.177 DST=172.28.2.184 LEN=40 TOS=0x00 PREC=0x00 TTL=127
ID=16609 PROTO=TCP SPT=7166 DPT=3590 WINDOW=0 RES=0x00 ACK RST URGP=0

net.ipv4.ip_forward = 1

is set, too.

Best Regards
Marcus
_______________________________________________
CentOS mailing list
CentOS at centos.org
http://lists.centos.org/mailman/listinfo/centos


Sent via BlackBerry from T-Mobile