Re: [gentoo-user] DNAT not working

[Daniel Iliev <daniel.iliev@gmail.com>]

On Sun, 13 Jan 2008 20:01:04 +0000 (UTC)
Konstantinos Agouros <elwood@agouros.de> wrote:

> Hi,
> 
> I have a box running vmware server where I need some DNAT rules to get
> traffic from a vm to where it belongs. Inserting the rule
> iptables -t nat -I PREROUTING -s ... -d ... -p tcp --dport ... -j
> DNAT --to-destination destaddr
> 
> gives me:
> 
> iptables: No chain/target/match by that name
> 
> Also I had to manually modprobe iptable_nat since iptables -L didn't
> initialize everything. I rebuilt iptables to match the current kernel
> (2.6.23-gentoo-r3) no luck. Strace on the command showed me
> setsockopt(3, SOL_IP, 0x40 /* IP_??? */,
> "nat\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"...,
> 920) = -1 ENOENT (No such file or directory)
> 
> Anybody got an idea what I am doing from?
> 
> Regards,
> 
> Konstantin



I believe you've forgotten to build support for NAT in your kernel:



│ Symbol: IP_NF_IPTABLES [=m]
│ Prompt: IP tables support (required for filtering/masq/NAT)
│ Defined at net/ipv4/netfilter/Kconfig:45 
│ Depends on: NET && INET && NETFILTER 
│ Location:
│ -> Networking
│ -> Networking support (NET [=y]) 
│ -> Networking options
│ -> Network packet filtering framework (Netfilter) (NETFILTER [=y]) 
│ -> IP: Netfilter Configuration 
│ Selects: NETFILTER_XTABLES


-- 
Best regards,
Daniel
--
gentoo-user@lists.gentoo.org mailing list