firewall script run at boot -> no masq, rerun manually -> masq worx

Griffon26 · 06-24-2002, 02:42 AM

I have set up my firewall script as 'iptables' in the /etc/init.d/ dir and put this line in it:

Quote:

# chkconfig: 2345 08 92

chkconfig indeed created links in the rc directories.

I can also see (by putting "echo something > /tmp/somefile" in the firewall script) that it is being run at boottime.

After startup I can see that the rules (iptables -L) are present.

Why then doesn't masquerading work? If I call the script manually (/etc/init.d/iptables restart), masquerading does work.

Griffon26 · 06-24-2002, 02:58 AM

I found out it has something to do with forwarding which for some reason isn't enabled when the script is run for the first time.

I think it has something to do with the moment when the script is run. Maybe /proc/sys/net/ipv4/ip_forward doesn't exist yet. I'm checking it now.

Griffon26 · 06-24-2002, 03:17 AM

Pff, sorry for wasting your time.

It turned out that I had forwarding set to "no" in /etc/sysconfig/network which was causing all sorts of scripts to set /proc/sys/net/ipv4/ip_forward back to 0.

Now it's working perfectly.

Nice talking to m'self