добрый день помогите разобраться с маршрутизацией
вот схемка сети http://www.radio-portal.ru/temp/sm.gif
из сетей 192.0.2.0\24 192.0.0.0\23 настроен маскартинг в инет через роутер 10.136.104.1 (он же являеться шлюзом по дефолту)
но вот пакеты до 94.158.96.40 (G2) не доходят хотя с G1 я G2 вижу нормально, а надо чтобы доходили причем через NATконфиг G1
------------------------------------------------------------
[root@gateway root]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default * 255.255.255.255 UH 0 0 0 eth0
10.103.111.0 10.111.50.50 255.255.255.0 UG 0 0 0 eth1
10.136.104.0 * 255.255.255.0 U 0 0 0 eth0.2
192.0.2.0 * 255.255.255.0 U 0 0 0 eth0.1
192.0.0.0 * 255.255.252.0 U 0 0 0 eth0.3
94.158.96.0 10.111.50.50 255.255.240.0 UG 0 0 0 eth1
10.111.0.0 * 255.255.0.0 U 0 0 0 eth1
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 10.136.104.1 0.0.0.0 UG 0 0 0 eth0.2
You have new mail in /var/spool/mail/root
[root@gateway root]# iptables
iptables v1.2.6a: no command specified
Try `iptables -h' or 'iptables --help' for more information.
[root@gateway root]# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_IN:'
DROP all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp multiport dports smtp,47,omirr,44337,8888,1723,4899,3389,252,4672
ACCEPT tcp -- anywhere anywhere tcp flags:ACK/ACK
ACCEPT all -- anywhere anywhere state ESTABLISHED
ACCEPT all -- anywhere anywhere state RELATED
ACCEPT udp -- anywhere anywhere udp spt:domain dpts:1024:65535
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT gre -- anywhere anywhere
ACCEPT all -- 192.0.2.0/24 anywhere
ACCEPT all -- host10840.butovonet.ru anywhere
ACCEPT all -- kb anywhere
ACCEPT all -- 192.0.0.0/24 anywhere
ACCEPT all -- anywhere !192.0.2.0/24
Chain FORWARD (policy ACCEPT)
target prot opt source destination
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_OUT:'
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_IN:'
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
LOG all -- anywhere anywhere LOG level debug prefix `BANDWIDTH_OUT:'
[root@gateway root]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT gre -- anywhere anywhere to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:omirr to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:1723 to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:47 to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:4899 to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:252 to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:smtp to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:8888 to:192.0.2.254
DNAT tcp -- anywhere anywhere tcp dpt:44337 to:192.0.2.254
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
SNAT all -- anywhere servschool1978.school1978.localto:192.0.2.250
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
-----------------------------------------------------------------------------------------
kb в конфиге какраз 94.158.96.40 (G2)
не пойму чего нехватает
