Re: [tlug] Any iptables wizards around?

[Andreas Kieckens <akieckens@example.com>]

I tried with the fake ARP daemon but that didn't work either. Neither did setting the dnat rule manually. Responses arrive now but still aren't forwarded. I've already set the forward policy to accept but still no luck. There must be some small setting somewhere that I'm missing.

~Andreas Kieckens
Author of www.rivercityretro.org. You should read it!
Founder of www.gametrip.org. A gamer's travel guide.

Twitter: @Metallion98.
Linkedin: Public profile.

On 03/25/2011 05:13 PM, Attila Kinali wrote:

On Fri, 25 Mar 2011 15:56:14 +0900
Andreas Kieckens <akieckens@example.com> wrote:

Does anyone know how to solve this? Perhaps through virtual interfaces? 
If possible, I would like to handle this on the host OS without 
tinkering with the VM's internal network settings.

The problem is not with iptables, but rather that you are nating to
an IP that the host doesn't respond to. Hence the ARP requests for
those IPs remain unanswered.

There are two ways to get around this:

1) Run an arp daemon that answers those requests
2) set up eth0:1 and eth0:2 with the external IPs of the VMs

Though, far easier would be, to connect br0 directly to eth0
and give the VMs those two external IPs

			Attila Kinali