iptable_nat modules problem with N810 (latest diablo)?

Hi,

I am trying to share internet from "maemo device" to "host PC"
through USB or bluetooth. For that, i am using iptable_nat modules
following the tips described here:
http://talk.maemo.org/showthread.php?t=19035.

After install the iptable_nat modules and iptable-ext package, i tryed
to configure the masquerading with the following commands:

iptables --flush -t nat
echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -P FORWARD ACCEPT
iptables -A POSTROUTING -t nat -j MASQUERADE -s 192.168.2.0/24

The iptables rules are there:

Nokia-N810-43-7:~# iptables -L Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT 0 -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Nokia-N810-43-7:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE 0 -- 192.168.2.0/24 anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination

The network (ip and route) is configured correctlly (both "maemo
device" and "host PC"), but i can not share internet from "maemo device"
to "host PC". With the same configuration i can share internet from
"host PC" to "maemo device".

Anybody got internet shared from "maemo device" to "host PC"? Am I
missing some step? I also tryed to recompile the iptable_nat modules but
no success.

Thanks,

André Rodrigues

PS: My device: Linux Nokia-N810-43-7 2.6.21-omap1

En/na Andre Rodrigues ha escrit:

>
> Anybody got internet shared from "maemo device" to "host PC"? Am I
> missing some step? I also tryed to recompile the iptable_nat modules but
> no success.

I tried it but without using iptables: using openssh as a socks proxy.
If you have the openssh server installed and running on the tablet, from
the host pc you can ssh into the tablet this way:

ssh -D 6969 tablet.address


then on the host configure your applications to use a socks5 proxy at
localhost:6969 (you can use tsocks for applications that don't support
socks5 directly).
If the host pc is running windows, you can use putty, in the "ssh
tunnels" panel add a tunnel with the "Dynamic" option set.
It's not as transparent as setting up nat on the tablet but it works.

Bye
--
Luca

Hi Luca,

I am implementing a module of Maemo Pc-Connectivity Project. So, it
would be nice if the configuration is transparent as much as possible
(it was why i choose nat). Thank you for your tip using openssh.

Regards,

Andre

Luca Olivetti escreveu:
> En/na Andre Rodrigues ha escrit:
>
>
>> Anybody got internet shared from "maemo device" to "host PC"? Am I
>> missing some step? I also tryed to recompile the iptable_nat modules but
>> no success.
>>
>
> I tried it but without using iptables: using openssh as a socks proxy.
> If you have the openssh server installed and running on the tablet, from
> the host pc you can ssh into the tablet this way:
>
> ssh -D 6969 tablet.address
>
>
> then on the host configure your applications to use a socks5 proxy at
> localhost:6969 (you can use tsocks for applications that don't support
> socks5 directly).
> If the host pc is running windows, you can use putty, in the "ssh
> tunnels" panel add a tunnel with the "Dynamic" option set.
> It's not as transparent as setting up nat on the tablet but it works.
>
> Bye
>

En/na Andre Rodrigues ha escrit:
> Hi Luca,
>
> I am implementing a module of Maemo Pc-Connectivity Project. So, it
> would be nice if the configuration is transparent as much as possible
> (it was why i choose nat). Thank you for your tip using openssh.

Mmh, I don't think it makes a difference, but you could try

iptables -A POSTROUTING -t nat -j MASQUERADE -o wlan0

instead of

iptables -A POSTROUTING -t nat -j MASQUERADE -s 192.168.2.0/24

Also, check that there isn't a firewall on the host pc messing things up.

Bye
--
Luca

Hi,

Same result with (no success):
iptables -A POSTROUTING -t nat -j MASQUERADE -o wlan0

Also i checked and there is no firewall running on host PC

Regards,

Andre

Luca Olivetti escreveu:
> En/na Andre Rodrigues ha escrit:
>
>> Hi Luca,
>>
>> I am implementing a module of Maemo Pc-Connectivity Project. So, it
>> would be nice if the configuration is transparent as much as possible
>> (it was why i choose nat). Thank you for your tip using openssh.
>>
>
> Mmh, I don't think it makes a difference, but you could try
>
> iptables -A POSTROUTING -t nat -j MASQUERADE -o wlan0
>
> instead of
>
> iptables -A POSTROUTING -t nat -j MASQUERADE -s 192.168.2.0/24
>
> Also, check that there isn't a firewall on the host pc messing things up.
>
> Bye
>