On Fri, 2025-06-06 at 20:45 +1000, fedora@xxxxxxxxxxxxxx wrote: > After looking everywhere, and digging into my iptables rules and > such, I discovered that NAT is not being set up. > > I added a rule to my firewall script > iptables-legacy -t nat -A POSTROUTING -o eth1 -j MASQUERADE > eth0 is the local network, eth1 sees the internet. > Things work now. > > In f40 NAT was always being set up automatically. Is it a network > manager issue? So far as I'm aware, NAT has never been set up automatically, you always had to set it up in some way. When I had dial-up, I used to have a command somewhat like yours in my iptables firewall script, also with an command line to turn on IP forwarding. Now, Network Manager has some options for sharing a connection. Though I find it far from straight-forward. Instead of sharing out your connection with your internet service, you enable sharing on the interface facing the rest of your LAN. Which begs the question: What sets up the source parameters for the connection that it is sharing? Does it simply assume the /other/ connection? And what would happen if you had more than two real interfaces? Previously, you'd have set up IP forwarding and NAT on the internet facing connection. *It* is the one that needs special adjustments for this role. It also insists on setting up the shared connection with a different IP range than what I'd want to use, meaning I'd have to reconfigure everything else on my LAN (there's a new trend that NAT clients end up on a 192.168.42 or .43 or .44 subnet). And probably involves a bunfight with my existing DHCP server on the same machine. This is supposed to tell you how to do it: https://fedoramagazine.org/internet-connection-sharing-networkmanager/ -- uname -rsvp Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 (yes, this is the output from uname for this PC when I posted) Boilerplate: All unexpected mail to my mailbox is automatically deleted. I will only get to see the messages that are posted to the mailing list. -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
