[suse-sles-e] SLES, DNAT from localhost

From: Markus Feilner (lists_at_feilner-it.net)
Date: Wed Jul 05 2006 - 11:04:49 CEST


From: Markus Feilner <lists@feilner-it.net>
Date: Wed, 5 Jul 2006 11:04:49 +0200
Message-Id: <200607051104.49353.lists@feilner-it.net>
Subject: [suse-sles-e] SLES, DNAT from localhost

Hello list,
I need to DNAT a local server with a command similar to the following:
----------------------
sles9:~ # iptables -t nat -A OUTPUT -d 193.99.144.85 -j DNAT --to-destination
192.168.10.1
iptables: Invalid argument
sles9:~ # iptables -t nat -I OUTPUT -d 193.99.144.85 -j DNAT --to-destination
192.168.10.1
iptables: Target problem
sles9:~ #
-----------------
on my sles with kernel:
Linux sles9 2.6.5-7.257-default #1 Mon May 15 14:14:14 UTC 2006 i686 athlon
i386 GNU/Linux

I found out that the error above results from a mistake/feature in SuSE's
kernel which deactivates the DNAT for local adresses.

Is there any patch/workaround for this problem?
I saw some messages on this list some weeks ago, but I could not find a
solution. Build a custom kernel is not an option.
Thank you!

-- 
Best Regards - Mit freundlichen Grüßen
Markus Feilner
--------------------------
Feilner IT Linux & GIS 
Linux Solutions, Training, Seminare und Workshops - auch Inhouse
Kötztingerstr 6c                93057 Regensburg
fon regensburg                  +49 941 8107989
mobil                           +49 170 3027092 
www: www.feilner-it.net mail: mfeilner@feilner-it.net
---------------------------------------
My new book - Out now: http://www.packtpub.com/openvpn/book
OPENVPN : Building and Integrating Virtual Private Networks
=======================================
---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com


This archive was generated by hypermail 2.1.7 : Wed Jul 05 2006 - 11:04:02 CEST