[CentOS] iptables: forwarding on internal device

Mon Feb 9 07:58:54 UTC 2009
Marcus Moeller <mm at gcug.de>

Good Morning,

iptables -L -v now shows:

    0     0 ACCEPT     all  --  eth0   eth0    anywhere
anywhere            state NEW,RELATED,ESTABLISHED

But the packages are still dropped:

Feb  9 10:48:20 firewall kernel: DROP-TCP IN=eth0 OUT=eth0
SRC=192.168.100.192 DST=172.28.2.161 LEN=44 TOS=0x00 PREC=0x00 TTL=59
ID=54 PROTO=TCP SPT=9100 DPT=4068 WINDOW=0 RES=0x00 ACK SYN URGP=0

Could it be that I have to enable something in proc to allow
forwarding on an internal device?

Best Regards
Marcus