https nije problem, jer na nekim drugim sajtovima radi bez problema (
www.gmail.com). Evo deo IPtables koji se odnosi na forward i nat:
_______________________________________________________________________________
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m policy --dir in --pol ipsec --proto esp
-j forward_int
-A FORWARD -i eth0 -j forward_ext
-A FORWARD -i eth1 -j forward_int
-A FORWARD -j DROP
______________________________________________________________________
-A forward_ext -p icmp -m state --state ESTABLISHED -m icmp --icmp-type 0 -j ACC
EPT
-A forward_ext -m state --state INVALID -j DROP
-A forward_ext -p icmp -m state --state RELATED -m icmp --icmp-type 3 -j ACCEPT
-A forward_ext -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type
0 -j ACCEPT
-A forward_ext -d 172.16.10.0/255.255.255.0 -m state --state NEW,RELATED,ESTABLI
SHED -j ACCEPT
-A forward_ext -s 172.16.10.0/255.255.255.0 -m state --state NEW,RELATED,ESTABLI
SHED -m policy --dir in --pol ipsec --proto esp
-j ACCEPT
-A forward_ext -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A forward_ext -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A forward_ext -j DROP
-A forward_int -o eth0 -p icmp -m state --state NEW -m icmp --icmp-type 8 -j ACC
EPT
-A forward_int -m state --state INVALID -j DROP
-A forward_int -p icmp -m state --state RELATED -m icmp --icmp-type 3 -j ACCEPT
-A forward_int -p icmp -m state --state RELATED,ESTABLISHED -m icmp --icmp-type
0 -j ACCEPT
-A forward_int -d 172.16.10.0/255.255.255.0 -m state --state NEW,RELATED,ESTABLI
SHED -j ACCEPT
-A forward_int -s 172.16.10.0/255.255.255.0 -m state --state NEW,RELATED,ESTABLI
SHED -m policy --dir in --pol ipsec --proto esp
-j ACCEPT
-A forward_int -o eth1 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A forward_int -i eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A forward_int -j DROP
______________________________________________________________
:PREROUTING ACCEPT [331705:21771578]
:POSTROUTING ACCEPT [1925:264264]
:OUTPUT ACCEPT [0:0]
-A POSTROUTING -o eth1 -j MASQUERADE
______________________________________________________________________
[Ovu poruku je menjao IzNoGood dana 29.06.2005. u 12:04 GMT+1]
Baroom Baroom