https://bugzilla.novell.com/show_bug.cgi?id=756200 https://bugzilla.novell.com/show_bug.cgi?id=756200#c0 Summary: iptables snat/masquerading not working with kernel 3.3.0 Classification: openSUSE Product: openSUSE 12.2 Version: Factory Platform: i586 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: per@opensuse.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:11.0) Gecko/20100101 Firefox/11.0 Hardware: stand-alone firewall system, PIII 800MHZ (minerva), 512Mb RAM. This is a production firewall box, I'm unlikely to be able to retrieve diagnostics or do many further tests. Due to a problem with network interface overruns: http://lists.opensuse.org/opensuse/2012-04/msg00185.html I decided to move up to kernel 3.3.0 (-2-default) from factory. After also upgrading iptables, I kept having troubles getting masquerading/snat'ing to work again. Googling found a couple of people complaining about the same: http://ask.fedoraproject.org/question/1429/port-forwarding-with-kernel-330-n... http://www.fedoraforum.de/viewtopic.php?f=6&p=124882 I've been troubleshooting this for a couple of days, and can only conclude that SNAT'ing/masquerading simply doesn't work with this kernel. I'll probably try an older kernel (3.1.0) to see if that makes a difference. Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.