[Netkit.users] TAP interface & masquerade

Adrian van Dongen adrianvandongen at gmail.com
Thu Jul 9 15:18:24 CEST 2009


If you want to the NAT rule(s) you can run:

iptables -L -t nat (-n if you dont want name resolving)

You should see the masquerading rule there.

If you use the option -v (iptables -L -t nat -v)  you can see which rule
your packets hits.

I hope this helps.

Grts,

Adrian.

On Thu, Jul 9, 2009 at 1:43 PM, Cyrille OLIVIER <cyrilleo at hotmail.com>wrote:

>  Hi,
> I try to setup a TAP interface.
> vstart r1 --con0=this --eth0=tap,10.0.0.2,10.0.0.3 => OK, r1 boot
> successfully.
> So, inside r1: eth0=10.0.0.3/24
> The host PC has a real network-interface eth0=10.0.0.2/24
> To reach internet, the next-hop is the 10.0.0.1/24 in another PC.
>
> In the host PC, ping 10.0.0.1 is OK. ping 10.0.0.3 is OK.
> Inside r1 vm: ping 10.0.0.2 is OK. but ping 10.0.0.1 is NOK :(
>
> In the host PC, I check:
> - /proc/sys/net/ip4/ip_forward is 1 : OK
> - iptables -L does not display the masquerading in postrouting chain(result
> of 'iptables -t nat -A POSTROUTING -j MASQUERADE') but its seems OK.
>
> Any idea why ping from VM to external gw is NOK ?
>
> Thanks,
> Best regards to all,
> Cyrille
>
>
>
>
>
> ------------------------------
> Souhaitez vous  « être au bureau sans y être » ? Oui je le veux !<http://www.microsoft.com/france/windows/bts/default.mspx>
>
> _______________________________________________
> Netkit.users mailing list
> Netkit.users at list.dia.uniroma3.it
> http://list.dia.uniroma3.it/mailman/listinfo/netkit.users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://list.dia.uniroma3.it/pipermail/netkit.users/attachments/20090709/8964a287/attachment.htm 


More information about the Netkit.users mailing list