<p dir="ltr">I'm on my phone at the moment. I'll get on a keyboard and pull data shortly.</p>
<p dir="ltr">It does show rules so its running. I'll include the setup rules for clarity.</p>
<p dir="ltr">Oh. NetworkManager is not controlling the process at all. In RHEL7 it's supposed to be able to do many, many things that could only be done with manual tricks. But the new process is far more complicated than doing it manually for the simple setup I have.</p>
<div class="gmail_quote">On Feb 16, 2015 8:42 AM, "Alex Carver" <<a href="mailto:agcarver%2Bale@acarver.net">agcarver+ale@acarver.net</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">What are the current rules as listed by iptables -n -L and iptables -n<br>
-L -t nat?<br>
<br>
On 2015-02-16 05:35, Jim Kinney wrote:<br>
> I've got a firewall/router running centos 7. I've disabled firewalld and<br>
> enabled iptables instead while I learn the new firewalld.<br>
><br>
> The box has a WAN nic with 3 IPs. One for itself and the other 2 for other<br>
> systems. I'm using nat and have pre and post routing rules to do the<br>
> translation.<br>
><br>
> Now for the weirdness.<br>
><br>
> One works and the other doesn't.<br>
><br>
> The rules are identical except for IPs. The rest of the LAN is simply nat<br>
> translated outbound. They all work. One server, the :2 on the nic can't get<br>
> outside at all if one the static translate. The :1 machine is fine.<br>
><br>
> Doing a tcpdump shows ping to WAN gateway going out and returning to<br>
> outside nic but it then gets lost in the redirect.<br>
><br>
> There are explicit forward rules for needed ports but I opened it to all<br>
> ports for the troubled machine.<br>
><br>
> It's a new machine that passed a full memtest+ run.<br>
><br>
> I'm stumped.<br>
><br>
><br>
><br>
> _______________________________________________<br>
> Ale mailing list<br>
> <a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
> <a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
> See JOBS, ANNOUNCE and SCHOOLS lists at<br>
> <a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
><br>
<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div>