NetFilter
[Top] [All Lists]

debian [testing/etch] redirected broadcasts not working

To: <netfilter@lists.netfilter.org>
Subject: debian [testing/etch] redirected broadcasts not working
From: <mabra@manfbraun.de>
Date: Sat, 24 Feb 2007 12:03:19 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Sender: netfilter-bounces@lists.netfilter.org
Thread-index: AcdYA11AcHxm6wX0SV2tzV13/yiHgw==
Hi All!

I am struggling with ipfilters to redirect broadcast from the internet into
my LAN, which I need for Wake On LAN(WAN). I have just moved from NetBSD to
Debian and have set it up to be a router, which does well. I am new to
ipfilters, but I got all of my nat-based redirects of ports running, except
this one:

iptables -t nat -A PREROUTING -i $EXTIF -p udp --dport 8888 -j DNAT --to
192.168.26.255

This is syntactically accepted by ipfilters, but there are no redirected
packages in the LAN, which I track with tcpdump. The packages reach my
public interface, but not more. In NetBSD, I had to set the kernel variable
"net.inet.ip.directed-broadcast" to allow the redirected broadcast. After
long serches, I discovered "net.ipv4.ip_echo_ignore_broadcasts" for Debian
from a posting. But if I try to set this variable, I get only "unknown key"
[I use "sysctl -w ...] as an error message.

Is this a limitation to the testing version, or am I completely wrong with
my attempt?
Any help would be great!

Best regards,
Manfred 



<Prev in Thread] Current Thread [Next in Thread>
  • debian [testing/etch] redirected broadcasts not working, mabra <=