[Voyage-linux] Re: strange route / nat issue

[Rob J. Epping]

Hi Wayne,

On Sat, Apr 10, 2010 at 1:11 PM, Wayne Lee <linkconnect at googlemail.com> wrote:
>>> I have a very strange problem which has taken half a day to debug now..
>>> Tried several options, but to no avail.
>
>>> Internet is connected over PPTP from an ADSL modem.
>>> NAT is setup using nat.sh
>
> Iptables blocking it ?

not AFAIKT

nono:~# iptables -vxnL
Chain INPUT (policy ACCEPT 961970 packets, 91296589 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain FORWARD (policy ACCEPT 46 packets, 2392 bytes)
    pkts      bytes target     prot opt in     out     source
     destination
      51     9654 vlan3-INBOUND  all  --  *      *       0.0.0.0/0
       192.168.206.0/24
      61    22184 vlan3-FORWARD  all  --  *      *
192.168.206.0/24     0.0.0.0/0
   17619 14691565 vlan5-INBOUND  all  --  *      *       0.0.0.0/0
       192.168.205.0/24
   16510  1827196 vlan5-FORWARD  all  --  *      *
192.168.205.0/24     0.0.0.0/0

Chain OUTPUT (policy ACCEPT 4328329 packets, 813008720 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain vlan3-FORWARD (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
      61    22184 ACCEPT     all  --  *      *       192.168.206.0/24
   0.0.0.0/0

Chain vlan3-INBOUND (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
      51     9654 ACCEPT     all  --  *      *       0.0.0.0/0
   192.168.206.0/24

Chain vlan5-FORWARD (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
   16510  1827196 ACCEPT     all  --  *      *       192.168.205.0/24
   0.0.0.0/0

Chain vlan5-INBOUND (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
   17619 14691565 ACCEPT     all  --  *      *       0.0.0.0/0
   192.168.205.0/24
nono:~# iptables -vxnL -t nat
Chain PREROUTING (policy ACCEPT 156593 packets, 11597255 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain POSTROUTING (policy ACCEPT 133692 packets, 12792289 bytes)
    pkts      bytes target     prot opt in     out     source
     destination
  134311 12830135 vlan5-NAT  all  --  *      *       0.0.0.0/0
   0.0.0.0/0
      55     4833 vlan3-NAT  all  --  *      *       0.0.0.0/0
   0.0.0.0/0

Chain OUTPUT (policy ACCEPT 133532 packets, 12782147 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain vlan3-NAT (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
       6      352 MASQUERADE  all  --  *      ppp0    192.168.206.0/24
    0.0.0.0/0

Chain vlan5-NAT (1 references)
    pkts      bytes target     prot opt in     out     source
     destination
     613    37494 MASQUERADE  all  --  *      ppp0    192.168.205.0/24
    0.0.0.0/0
nono:~# iptables -vxnL -t raw
Chain PREROUTING (policy ACCEPT 530622 packets, 57287177 bytes)
    pkts      bytes target     prot opt in     out     source
     destination
  396847 29358110 NOTRACK    udp  --  *      *       192.168.205.0/24
   192.168.205.254     udp dpt:53
      10      618 NOTRACK    udp  --  *      *       192.168.206.0/24
   192.168.206.254     udp dpt:53
       0        0 NOTRACK    udp  --  *      *       192.168.2.0/24
   192.168.2.254       udp dpt:53

Chain OUTPUT (policy ACCEPT 2630831 packets, 498375841 bytes)
    pkts      bytes target     prot opt in     out     source
     destination
nono:~# iptables -vxnL -t mangle
Chain PREROUTING (policy ACCEPT 964817 packets, 95648795 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain INPUT (policy ACCEPT 939550 packets, 83049006 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain FORWARD (policy ACCEPT 25167 packets, 12589300 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain OUTPUT (policy ACCEPT 4307678 packets, 810061981 bytes)
    pkts      bytes target     prot opt in     out     source
     destination

Chain POSTROUTING (policy ACCEPT 4332845 packets, 822651281 bytes)
    pkts      bytes target     prot opt in     out     source
     destination
nono:~#
-- 
GRTNX,
RobJE