| 1 |
On Sep 24, 2011 12:05 AM, "Adam Carter" <adamcarter3@×××××.com> wrote: |
| 2 |
> |
| 3 |
> > Can you post the outputs of 'iptables-save' and 'ip rule show'? |
| 4 |
> |
| 5 |
> # iptables-save |
| 6 |
> # Generated by iptables-save v1.4.12.1 on Sat Sep 24 02:57:42 2011 |
| 7 |
> *nat |
| 8 |
|
| 9 |
[snip] |
| 10 |
|
| 11 |
> -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination |
| 12 |
10.0.0.254:3129 |
| 13 |
|
| 14 |
This line looks suspicious. |
| 15 |
|
| 16 |
What's living at 10.0.0.254:3129 ? |
| 17 |
|
| 18 |
Try inserting an ACCEPT target above that line, e.g.: |
| 19 |
|
| 20 |
iptables -t nat -I PREROUTING 3 -j ACCEPT |
| 21 |
|
| 22 |
and test again. (Use iptables-save after the above command to ensure that |
| 23 |
the newly inserted rule indeed slips before the suspicious line). |
| 24 |
|
| 25 |
> I'm using ifconfig so i dont have the ip binary on this system. |
| 26 |
> |
| 27 |
|
| 28 |
No problem. If my hunch is correct, it's that suspicious line that's been |
| 29 |
causing you grief. |
| 30 |
|
| 31 |
Rgds, |
Archives