MIME-Version: 1.0
References: <cc077dc0-33ab-9dff-309e-36864daee8f6@itwrx.org>
 <CAD+eXGTJgGM5F+_GHu_ZGTkjYG=6uv0rQu00khoY98DHeFQwjQ@mail.gmail.com> <8c9ea2f0-4b89-30b4-6748-28875db2d0e7@itwrx.org>
In-Reply-To: <8c9ea2f0-4b89-30b4-6748-28875db2d0e7@itwrx.org>
From: Konstantin Kulikov <k.kulikov2@gmail.com>
Date: Thu, 20 Apr 2023 19:52:05 +0300
Message-ID: <CAD+eXGQuadtCsORk4ADByOwomChXAPYBhx6tSN_zVsrm+OAwVg@mail.gmail.com>
Subject: Re: router/firewall not forwarding traffic between interfaces?
To: ITwrx <lists@itwrx.org>
Cc: ~alpine/users@lists.alpinelinux.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Maybe default gw on the client is missing then (at least you don't set
it in dhcpd conf, but i'm not familiar with it).
Run tcpdump on both machines, make sure packets actually go through.

On Thu, Apr 20, 2023 at 7:45=E2=80=AFPM ITwrx <lists@itwrx.org> wrote:
>
> On 4/20/23 11:17 AM, Konstantin Kulikov wrote:
> > Don't you need to enable forwarding on both interfaces? I usually just
> > enable it in /etc/conf.d/nftables and block unwanted traffic in the
> > firewall.
> >
> > Your nftables config seems correct.
>
> Thanks for your response!
>
> It seems i had tried enabling forwarding on eth0 previously, as it was
> already in /etc/sysctl.conf, but was commented out. I just retried with
> /etc/sysctl.conf as:
>
> # content of this file will override /etc/sysctl.d/*
> net.ipv4.ip_forward=3D1
> net.ipv4.conf.eth1.forwarding=3D1
> net.ipv4.conf.eth0.forwarding=3D1
>
> and after reboot got:
>
> "network is unreachable" for www.google.com, 8.8.8.8, and 192.168.43.1
> (upstream router wan interface)
>
> while pinging 10.2.0.1 (upstream router lan interface) was successful.
>
> /etc/conf.d/nftables already has:
>
> enable_forwarding=3D"yes"
>
> any other ideas appreciated
>