<div dir="ltr">Instead of this:<div><br></div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: 'Lucida Grande'; font-size: 14px; line-height: 18px; "><pre style="padding-top: 1em; padding-right: 1em; padding-bottom: 1em; padding-left: 1em; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: dashed; border-right-style: dashed; border-bottom-style: dashed; border-left-style: dashed; border-top-color: rgb(47, 111, 171); border-right-color: rgb(47, 111, 171); border-bottom-color: rgb(47, 111, 171); border-left-color: rgb(47, 111, 171); color: black; background-color: rgb(249, 249, 249); line-height: 1.1em; ">
tables -t nat -A PREROUTING -p tcp -s <a href="http://192.168.0.202">192.168.0.202</a> -d <a href="http://192.168.0.200">192.168.0.200</a> --dport domain -j DNAT --to-destination <a href="http://192.168.0.1">192.168.0.1</a>
iptables -t nat -A PREROUTING -p udp -s <a href="http://192.168.0.202">192.168.0.202</a> -d <a href="http://192.168.0.200">192.168.0.200</a> --dport domain -j DNAT --to-destination <a href="http://192.168.0.1">192.168.0.1</a></pre>
</span><div>Did you do/would you try this (on your server):</div><div><br></div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: 'Lucida Grande'; font-size: 14px; line-height: 18px; "><pre style="padding-top: 1em; padding-right: 1em; padding-bottom: 1em; padding-left: 1em; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: dashed; border-right-style: dashed; border-bottom-style: dashed; border-left-style: dashed; border-top-color: rgb(47, 111, 171); border-right-color: rgb(47, 111, 171); border-bottom-color: rgb(47, 111, 171); border-left-color: rgb(47, 111, 171); color: black; background-color: rgb(249, 249, 249); line-height: 1.1em; ">
tables -t nat -A PREROUTING -p tcp -s <a href="http://192.168.0.202">192.168.0.202</a> -d <a href="http://192.168.0.200">192.168.0.200</a> --dport domain -j DNAT --to-destination <a href="http://192.168.1.254">192.168.1.254</a>
iptables -t nat -A PREROUTING -p udp -s <a href="http://192.168.0.202">192.168.0.202</a> -d <a href="http://192.168.0.200">192.168.0.200</a> --dport domain -j DNAT --to-destination <a href="http://192.168.1.254">192.168.1.254</a></pre>
</span></div><div>This assumes your router is set up as a DNS server. Then in resolv.conf, use your router at <a href="http://192.168.1.254">192.168.1.254</a> as the DNS server, not any of those other values. That is (I think) similar to how I have mine configured at home. If you still have problems, I'll post my exact /etc conf files for you when I get home.<br>
<br><div class="gmail_quote">On Thu, Sep 18, 2008 at 12:22 PM, Christian Weßel <span dir="ltr"><<a href="mailto:wesselch@gmx.net">wesselch@gmx.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hello mokos,<br>
<br>
I just have a DNS problem, I try to configure my FC6 following the guide<br>
<a href="http://wiki.openmoko.org/wiki/USB_Networking#Proxying_with_iptables" target="_blank">http://wiki.openmoko.org/wiki/USB_Networking#Proxying_with_iptables</a><br>
because I have a simple static environment for my FR.<br>
<br>
FR.usb.ip = <a href="http://192.168.0.202" target="_blank">192.168.0.202</a><br>
server.usb.ip = <a href="http://192.168.0.200" target="_blank">192.168.0.200</a><br>
server.eth.ip = <a href="http://192.168.1.10" target="_blank">192.168.1.10</a><br>
router.eth.ip = <a href="http://192.168.1.254" target="_blank">192.168.1.254</a><br>
DNS.ip = <a href="http://212.6.108.140" target="_blank">212.6.108.140</a><br>
<br>
on server:<br>
[root@server ~]# cat /etc/resolv.conf<br>
search home<br>
nameserver <a href="http://212.6.108.140" target="_blank">212.6.108.140</a><br>
nameserver <a href="http://212.6.108.141" target="_blank">212.6.108.141</a><br>
<br>
[root@server ~]# iptables -L -t nat --line-numbers -n<br>
Chain PREROUTING (policy ACCEPT)<br>
num target prot opt source destination<br>
1 DNAT tcp -- <a href="http://192.168.0.202" target="_blank">192.168.0.202</a> <a href="http://192.168.0.200" target="_blank">192.168.0.200</a> tcp<br>
dpt:53 to:<a href="http://212.6.181.140" target="_blank">212.6.181.140</a><br>
2 DNAT udp -- <a href="http://192.168.0.202" target="_blank">192.168.0.202</a> <a href="http://192.168.0.200" target="_blank">192.168.0.200</a> udp<br>
dpt:53 to:<a href="http://212.6.181.140" target="_blank">212.6.181.140</a><br>
<br>
Chain POSTROUTING (policy ACCEPT)<br>
num target prot opt source destination<br>
1 MASQUERADE all -- <a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a> <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>
<br>
Chain OUTPUT (policy ACCEPT)<br>
num target prot opt source destination<br>
<br>
on FR:<br>
root@om-gta02:~# cat /etc/resolv.conf<br>
nameserver <a href="http://192.168.0.200" target="_blank">192.168.0.200</a><br>
<br>
root@om-gta02:~# ping <a href="http://74.125.19.147" target="_blank">74.125.19.147</a> -c 1<br>
PING <a href="http://74.125.19.147" target="_blank">74.125.19.147</a> (<a href="http://74.125.19.147" target="_blank">74.125.19.147</a>): 56 data bytes<br>
64 bytes from <a href="http://74.125.19.147" target="_blank">74.125.19.147</a>: seq=0 ttl=236 time=182.480 ms<br>
<br>
--- <a href="http://74.125.19.147" target="_blank">74.125.19.147</a> ping statistics ---<br>
1 packets transmitted, 1 packets received, 0% packet loss<br>
round-trip min/avg/max = 182.480/182.480/182.480 ms<br>
<br>
root@om-gta02:~# nslookup <a href="http://www.google.com" target="_blank">www.google.com</a><br>
Server: <a href="http://192.168.0.200" target="_blank">192.168.0.200</a><br>
Address 1: <a href="http://192.168.0.200" target="_blank">192.168.0.200</a><br>
<br>
nslookup: can't resolve '<a href="http://www.google.com" target="_blank">www.google.com</a>'<br>
<br>
For me the masqueration seems to be fine, just something with DNAT is<br>
wrong.<br>
If I change the FR.resolv.conf to 'nameserver <a href="http://212.6.181.140" target="_blank">212.6.181.140</a>' it also not<br>
working.<br>
<br>
But what's wrong?<br>
<br>
BTW: I got no SElinux security alerts, neither in secure nor in<br>
messages.<br>
--<br>
<br>
mfg/br, christian<br>
<br>
Flurstraße 14<br>
29640 Schneverdingen<br>
Germany<br>
<br>
E-Mail: <a href="mailto:wesselch@gmx.net">wesselch@gmx.net</a><br>
Telefon: +49 5193 97 14 95<br>
Mobile: +49 171 357 59 57<br>
<a href="http://wesselch.homelinux.org" target="_blank">http://wesselch.homelinux.org</a><br>
<br>_______________________________________________<br>
Openmoko community mailing list<br>
<a href="mailto:community@lists.openmoko.org">community@lists.openmoko.org</a><br>
<a href="http://lists.openmoko.org/mailman/listinfo/community" target="_blank">http://lists.openmoko.org/mailman/listinfo/community</a><br>
<br></blockquote></div><br></div></div></div>