lakostis kernels discuss list

["Konstantin A. Lepikhov" <>]

Hi Maks!

Wednesday 25, at 02:39:44 AM you wrote:

> ну я не в курсе стоит  ли об этом писать и сюда-ли...
> но как то на этом ядре не работает iptables...
> 
> 
> Mar 25 02:20:10 srv-hn-4 network: ^ILoading rules for the "PREROUTING" 
> chain in the "mangle" table
> Mar 25 02:20:10 srv-hn-4 network: .
> Mar 25 02:20:10 srv-hn-4 last message repeated 4 times
> Mar 25 02:20:10 srv-hn-4 network: ^ILoading rules for the "PREROUTING" 
> chain in the "nat" table
> Mar 25 02:20:10 srv-hn-4 network: .
> Mar 25 02:20:10 srv-hn-4 last message repeated 7 times
> Mar 25 02:20:10 srv-hn-4 network: ^ILoading rules for the "POSTROUTING" 
> chain in the "nat" table
> Mar 25 02:20:10 srv-hn-4 network: iptables: Invalid argument
> Mar 25 02:20:10 srv-hn-4 network: ERROR: /etc/net/scripts/config-fw: 
> /sbin/iptables -t nat -A POSTROUTING -d 189.179.111.223 -p tcp --dport 
> 33573 -j DNAT --to-destination 192.168.100.12:33573
> Mar 25 02:20:10 srv-hn-4 network: .
> Mar 25 02:20:10 srv-hn-4 network: iptables: Invalid argument
> 
> 
> т.е. не принимается параметр -j DNAT --to-destination xxxx:y 
> 
> в 12 консоли: iptables: dnat: bad hook_mask 
> 
> соответственно не работает.
> 
> поймал на branch4.1 на 2.6.26-ovz-smp-alt3
УМВР:

[root@mozilla ~]# fgrep DNAT iptables 
-A nat.2 -p tcp -j DNAT --to-destination 10.10.10.101:80 
-A nat.3 -p tcp -j DNAT --to-destination 10.10.10.102:3307 
[root@mozilla ~]# rpm -q iptables
iptables-1.3.7-alt1
[root@mozilla ~]# uname -a
Linux xxxxxxx 2.6.26-ovz-smp-alt3 #1 SMP Wed Mar 11 08:23:24
UTC 2009 x86_64 GNU/Linux

-- 
WBR et al.