i.MX ProcessorsのトピックRe: iptables NAT

iptables NAT

niklasmolin — Fri, 31 Jan 2014 22:22:32 GMT

Hi.

I wonder if some one knows if it's possible to add NAT in the iptables (Yocto project)?

I checked in the .config file, but there seems to be no flag for that.

Is this something that is planned to be included?

Thanks,

Niklas

Re: iptables NAT

MarekVasut — Sun, 02 Feb 2014 17:22:01 GMT

You mean CONFIG_IP_NF_IPTABLES is missing in the kernel config ?

Re: iptables NAT

niklasmolin — Sun, 02 Feb 2014 23:02:08 GMT

I can find the CONFIG_IP_NF_IPTABLES, but I'm looking for NF_NAT, NF_NAT_IPV4 etc. I can't find them in the .config file.

I'm using kernel 3.10.9.

Re: iptables NAT

MarekVasut — Sun, 02 Feb 2014 23:21:28 GMT

Well run

$ make ARCH=arm CROSS_COMPILE=... menuconfig

Then navigate into Networking support -> Networking options -> Network packet filtering framework (Netfilter) -> IP: Netfilter Configuration -> IP tables support (required for filtering/masq/NAT)

... or you can just hit the 'slash' [/] key and type "IP_NF_IPTABLES" , which will give you the exact location of the config option.

Re: iptables NAT

niklasmolin — Mon, 03 Feb 2014 03:47:24 GMT

I can start the menuconfig and get down to IP tables support (required for filtering/masq/NAT)

But I can't find anywhere to enable NAT, to set the NF_NAT flag (and I can't find the NF_NAT in the .config file either).

Re: iptables NAT

niklasmolin — Mon, 03 Feb 2014 17:04:49 GMT

I managed to figure it out.

First I had to enable Netfilter connection tracking support in the Core Netfilter Configuration menu.

After that I go to IP: Netfilter Configuration menu, and enable IPv4 connection tracking support.

Re: iptables NAT

gavingreenwalt — Mon, 09 Feb 2015 17:49:03 GMT

I'm glad to hear that it's possible, but could you share a noob-friendly list of everything that needs to be enabled to get iptables NAT working.

I tried just bitbaking the iptables package and created an iptables.ipk however on installation it warned that I was missing the kernel modules so I figure I might as well rebuild the whole thing since I'll need an image eventually anyway.