Results 1 to 4 of 4

Thread: Masquerading side effect

  1. #1
    Join Date
    Sep 2011
    Beans
    11

    Post Masquerading side effect

    Hi Guys,
    I have a little problem with iptables masquerading. All my house's traffic is going though my ubuntu 11.04 box but cant connect to some sites. e.g. connect.facebook.com and cisco.com to name a few. iptables is not blocking anything and I'm not quite sure where to start looking with this. I have connected directly into my modem and these sites are reachable and DNS is not a problem.

    Masquerading rule if needed:
    Code:
    echo 1 > /proc/sys/net/ipv4/ip_forward
    iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE
    iptables-save
    Any help/suggestions would be greatly appreciated.

  2. #2
    Join Date
    Apr 2011
    Beans
    25

    Re: Masquerading side effect

    I think those are SSL sites???
    Maybe Ubuntu has been set up to block the SSL port (443).

  3. #3
    Join Date
    Sep 2011
    Beans
    11

    Re: Masquerading side effect

    Quote Originally Posted by bbqroast View Post
    I think those are SSL sites???
    Maybe Ubuntu has been set up to block the SSL port (443).
    I wouldn't think so because I can't open this website (http://www.juniper.net/as/en/product...series/srx210/) and it is clearly not https.

  4. #4
    Join Date
    Feb 2011
    Location
    Coquitlam, B.C. Canada
    Beans
    2,337
    Distro
    Ubuntu 16.04 Xenial Xerus

    Re: Masquerading side effect

    Without broader exposure to your iptable rules, it is hard to make suggestions. Perhaps use some temporary log statements in your iptables rules to figure out where packets are travsering and/or tcpdump or wireshark to see if packets are leaving or not coming back or whatever.
    You could also try:
    Code:
    iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
    or (which, according to my notes (cann't recall the reference), is the stricter form of the above):
    Code:
    iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to $EXTIP
    where $EXTIP is your external IP address.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •