https://netmaker.org logo
Powered by
While ingress clients get an IP from the network's...
# netmaker
r
While ingress clients get an IP from the network's subnet their traffic has as origin the IP of the "ingress server". Is there a way to change it?
j
you will need to turn RCE=on in your config, and then edit the postup/postdown commands in the ingress gateway to remove the "masquerade" commands
r
Thanks! Whereabouts is the postup/down?
j
click on the node in the UI and you'll see the fields
in the node details pane
r
thanks Ill check it
This is that Ive got:(postup) iptables -A FORWARD -i nm-netmain -j ACCEPT ; iptables -A FORWARD -o nm-netmain -j ACCEPT ; iptables -t nat -A POSTROUTING -o nm-netmain -j MASQUERADE (postdown) iptables -D FORWARD -i nm-netmain -j ACCEPT ; iptables -D FORWARD -o nm-netmain -j ACCEPT ; iptables -t nat -D POSTROUTING -o nm-netmain -j MASQUERADE
do I remove "-j MASQUERADE" from both?
b
remove the entire command iptables -t nat -A POSTROUTING -o nm-netmain -j MASQUERADE
r
Thanks!
I removed them and restarted everything but external clients are still NATed. Any ideas?
j
the command may still be on the server, so you'd have to manually delete the iptables rule (iptables -t nat -D POSTROUTING -o nm-netmain -j MASQUERADE)
r
"~# iptables -t nat -D POSTROUTING -o nm-netmain -j MASQUERADE iptables: Bad rule (does a matching rule exist in that chain?)."
are the rules inside the docker network?
https://termbin.com/hcfg My iptables nat rules
@jolly-london-20127 do you have any other debugging idea?
3 Views
PreviousNext
Powered by