Re: NAT between wireless and wired inside of Metrix

>>>>> "Stefan" == s mintier <smintier-/[email protected]> writes:

Stefan> uhhh, it's broke, and I don't know how to go about fixing it.
Stefan> I shot the wifidog, don't worry it was quick and I would guess
Stefan> painless. ( renamed it wifidog.off) Also ripped it's guck out
Stefan> of iptables. ummm don't know what else to put here except,
Stefan> please don't second guess me.  I have tested everything else
Stefan> and it works. Stay on topic: NAT between wireless and wired
Stefan> inside of Metrix. If I can figure this out the node will work,
Stefan> trust me.  Thank you all for your help and input.

Explain what you mean by "it's broke".  What isn't working?  The
general strategy is to start breaking it down into smaller chunks and
identify exactly where the problem is.  The easiest way to fix it is
to bring it somewhere that we can get our hands on and figure it out.
Until you can do that, here are some things to check:

 a) look at iptables on the metrix:

      iptables -v -n -t filter -L
      iptables -v -n -t nat -L
      iptables -v -n -t mangle -L

   you should see a nat rule like:

      Chain POSTROUTING (policy ACCEPT <aaa> packets, <bbb> bytes)
       pkts bytes target     prot opt in     out     source        destination
      xxxx  yyyy  MASQUERADE  0    --  *     eth0   0.0.0.0/0      0.0.0.0/0

   If there is a lot of extra cruft, figure out where it is coming
   from and temporarily disable it until you can figure out what is
   going wrong.

 b) while pinging from a wireless client to the something beyond the
    metrix (like the gateway 192.168.0.100), watch the icmp packets on
    each interface:

      tcpdump -n -i wlan0 icmp
      tcpdump -n -i eth0 icmp

    note whether the icmp packets arrive and leave and that the source
    address is actually translated.  If they do arrive and leave, then
    your NAT'ing is working and whatever you are seeing is something
    else.

 c) bring it to a meeting with a screwdriver and a way to power it and
    we can figure out what is wrong.


-- 
Russell Senior, Secretary
[email protected]

-- 
The Personal Telco Project - http://www.personaltelco.net/
Donate to PTP: http://www.personaltelco.net/donate
Un/Subscribe:  http://lists.personaltelco.net/mailman/listinfo/general/
Archives:  http://news.gmane.org/gmane.network.wireless.portland.general/
Etiquette: http://www.personaltelco.net/index.cgi/MailingListEtiquette