iptables; still can't get out from DNAT'ed servers... help please?! :)

[Robert Brockway]

On Thu, 19 Feb 2004, Madison Kelly wrote:

> Ah! I hate it when I do this...
>
> Ping isn't getting out or in but the Internet -is- working from the
> servers now after all... So, if someone knows why the icmp packets
> aren't getting through then by all means let me know but it is low
> priority.

A couple of thoughts:

1.  Are you SNATing icmp out?

2.  Is your firwall blocking icmp type 0 or 8?

Rob

-- 
Robert Brockway
Senior Technical Consultant, OpenTrend Solutions Ltd.
Phone: 416-669-3073, Email: rbrockway-wgAaPJgzrDxH4x6Dk/4f9A at public.gmane.org, http://www.opentrend.net
OpenTrend Solutions: Reliable, secure solutions to real world problems.
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml