root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument Why? Who know? SuSE Linux 9.0 With other modern distribs it work fine. Who want recompile iptables package? -- nick Rem: No Microsoft products were used in the production of this message.
* Nick;
root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
Why? Who know? SuSE Linux 9.0 With other modern distribs it work fine. Who want recompile iptables package?
what does 'which iptables' 'rpm -q iptables say -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer Please reply to the list; http://susefaq.sf.net Please don't CC me.
Togan Muftuoglu пишет:
* Nick;
on 17 Dec, 2003 wrote: root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
Why? Who know? SuSE Linux 9.0 With other modern distribs it work fine. Who want recompile iptables package?
what does 'which iptables' 'rpm -q iptables
say
root@academy:~> rpm -q iptables iptables-1.2.8-101 root@academy:~> which iptables /usr/sbin/iptables nick Rem: No Microsoft products were used in the production of this message.
* Nick;
Togan Muftuoglu пишет:
* Nick;
on 17 Dec, 2003 wrote: root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
root@academy:~> rpm -q iptables iptables-1.2.8-101 root@academy:~> which iptables /usr/sbin/iptables
does it fail again if you say /usr/sbin/iptables -t nat bla bla -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer Please reply to the list; http://susefaq.sf.net Please don't CC me.
Togan Muftuoglu пишет:
* Nick;
on 18 Dec, 2003 wrote: Togan Muftuoglu пишет:
* Nick;
on 17 Dec, 2003 wrote: root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
root@academy:~> rpm -q iptables iptables-1.2.8-101 root@academy:~> which iptables /usr/sbin/iptables
does it fail again if you say /usr/sbin/iptables -t nat bla bla
Yes! Again. With OUTPUT again. But with PREROUTING - work without errors. This error is for OUTPUT build-in only. nick -- Rem: No Microsoft products were used in the production of this message.
* Nick;
root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
does it fail again if you say /usr/sbin/iptables -t nat bla bla
Yes! Again.
With OUTPUT again. But with PREROUTING - work without errors. This error is for OUTPUT build-in only.
Can you try with --to-destination 127.0.0.1 to see if that works PS. Please read the footer before hitting the reply key -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer Please reply to the list; http://susefaq.sf.net Please don't CC me.
Togan Muftuoglu пишет:
* Nick;
on 18 Dec, 2003 wrote: root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
does it fail again if you say /usr/sbin/iptables -t nat bla bla
Yes! Again.
With OUTPUT again. But with PREROUTING - work without errors. This error is for OUTPUT build-in only.
Can you try with --to-destination 127.0.0.1 to see if that works
PS. Please read the footer before hitting the reply key
root@academy:~> /usr/sbin/iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 127.0.0.1:3128 iptables: Invalid argument root@academy:~> /usr/sbin/iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 127.0.0.1 iptables: Invalid argument root@academy:~> So, it is in SuSE9.0 only (but i've not tested with prev. versions of suse). I've tryed it with RedHat9.0 - fine. And yet, this rule was generated automaticaly by fwbuilder, and good work with other my nonsuse computers. :-) nick Rem: No Microsoft products were used in the production of this message.
* Nick;
Togan Muftuoglu пишет:
So, it is in SuSE9.0 only (but i've not tested with prev. versions of suse). I've tryed it with RedHat9.0 - fine. And yet, this rule was generated automaticaly by fwbuilder, and good work with other my nonsuse computers. :-)
Then I am clueless, I can not try it on a SuSE 9.0 since I have not installed it yet on any of machines :-( You may want to check with suse-security mailinglist archieves or netfilter mailinglist -- Togan Muftuoglu Unofficial SuSE FAQ Maintainer Please reply to the list; http://susefaq.sf.net Please don't CC me.
Nick wrote:
Togan Muftuoglu пишет:
* Nick;
on 18 Dec, 2003 wrote: Togan Muftuoglu пишет:
* Nick;
on 17 Dec, 2003 wrote: root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
root@academy:~> rpm -q iptables iptables-1.2.8-101 root@academy:~> which iptables /usr/sbin/iptables
does it fail again if you say /usr/sbin/iptables -t nat bla bla
Yes! Again.
With OUTPUT again. But with PREROUTING - work without errors. This error is for OUTPUT build-in only.
nick
You can't redirect an output, you need to redirect before. In the preroute chain -- ------------------------------------------------------ Una prensa libre es el gran enemigo de los dictadores. Independientemente de sus abusos, sus debilidades, sus errores. Una prensa libre es la gran aliada y defensora de la democracia. Charlos S. Shapiro Embajador de USA en la Rep. de Venezuela Martes, 20 de Mayo 2003
Nick wrote:
root@academy:~> iptables -t nat -A OUTPUT -p tcp --destination-port 80 -j DNAT --to-destination 192.168.0.1:3128 iptables: Invalid argument
Why? Who know? SuSE Linux 9.0 With other modern distribs it work fine. Who want recompile iptables package?
Try: iptables -t nat -A PREROUTING -p tcp -s 0/0 -d 0/0 --dport 80 -j DNAT --to-destination 192.168.0.1:3128 -- ------------------------------------------------------ Una prensa libre es el gran enemigo de los dictadores. Independientemente de sus abusos, sus debilidades, sus errores. Una prensa libre es la gran aliada y defensora de la democracia. Charlos S. Shapiro Embajador de USA en la Rep. de Venezuela Martes, 20 de Mayo 2003
participants (3)
-
Hipolito A. Gonzalez M.
-
Nick
-
Togan Muftuoglu