configuring iptables

[keerti@xxxxxxxxxxxxxxxxxxxxx]

Dear all,

I have configure linux 2.6.25 for R3210.I can boot the board,i can ping to
loopback address and self ipaddress,but cannot ping to other systems.This 
is the boot log file



+Ethernet eth0: MAC address 00:00:01:02:03:04
IP: 192.168.21.249/255.255.254.0, Gateway: 192.168.20.254
Default server: 0.0.0.0

RedBoot(tm) bootstrap and debug environment [ROM]
Non-certified release, version v2_0 - built 16:58:18, Jul 24 2007

Platform: PC (I386)
Copyright (C) 2000, 2001, 2002, Red Hat, Inc.

RAM: 0x00000000-0x000f0000, 0x00073370-0x000a0000 available
R3210    00:0013 04-09-2007


<press Ctrl+C to enter prompt mode>


               RedBoot>
mem_size: 2000000
initrd 1e00000 len 1e0000
Linux version 2.6.25 (root@xxxxxxxxxxxxxxxxxxxxx) (gcc version 3.2.2
20030222 (Red Hat Linux 3.2.2-5)) #39 Mon Mar 16 13:44:43 IST 2009
BIOS-provided physical RAM map:
 BIOS-e801: 0000000000000000 - 000000000009f000 (usable)
 BIOS-e801: 0000000000100000 - 0000000002000000 (usable)
32MB LOWMEM available.
Zone PFN ranges:
  DMA             0 ->     4096
  Normal       4096 ->     8192
Movable zone start PFN for each node
early_node_map[1] active PFN ranges
    0:        0 ->     8192
DMI not present or invalid.
Allocating PCI resources starting at 10000000 (gap: 02000000:fe000000)
Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 8128
Kernel command line: console=ttyS0,38400
Initializing CPU#0
PID hash table entries: 128 (order: 7, 512 bytes)
Console: colour dummy device 80x25
console [ttyS0] enabled
Dentry cache hash table entries: 4096 (order: 2, 16384 bytes)
Inode-cache hash table entries: 2048 (order: 1, 8192 bytes)
Memory: 26316k/32768k available (2363k kernel code, 6060k reserved, 1120k
data, 184k init, 0k highmem)
virtual kernel memory layout:
    fixmap  : 0xffffa000 - 0xfffff000   (  20 kB)
    vmalloc : 0xc2800000 - 0xffff8000   ( 983 MB)
    lowmem  : 0xc0000000 - 0xc2000000   (  32 MB)
      .init : 0xc046a000 - 0xc0498000   ( 184 kB)
      .data : 0xc034ecf2 - 0xc0466e9c   (1120 kB)
      .text : 0xc0100000 - 0xc034ecf2   (2363 kB)
Checking if this processor honours the WP bit even in supervisor mode...Ok.
SLUB: Genslabs=12, HWalign=32, Order=0-1, MinObjects=4, CPUs=1, Nodes=1
Mount-cache hash table entries: 512
Compat vDSO mapped to ffffe000.
CPU: 486
Checking 'hlt' instruction... OK.
Freeing SMP alternatives: 0k freed
net_namespace: 440 bytes
NET: Registered protocol family 16
PCI: Using configuration type 1
Setting up standard PCI resources
usbcore: registered new interface driver usbfs
usbcore: registered new interface driver hub
usbcore: registered new device driver usb
PCI: Probing PCI hardware
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 1024 (order: 1, 8192 bytes)
TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
TCP: Hash tables configured (established 1024 bind 1024)
TCP reno registered
checking if image is initramfs...it isn't (no cpio magic); looks like an
initrd
Freeing initrd memory: 1920k freed
rdc321x: watchdog init success
microcode: CPU0 not a capable Intel processor
IA-32 Microcode Update Driver: v1.14a <tigran@xxxxxxxxxxxxxxxxxxxx>
Installing knfsd (copyright (C) 1996 okir@xxxxxxxxxxxx).
NTFS driver 2.1.29 [Flags: R/W].
JFFS2 version 2.2. © 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
Serial: 8250/16550 driver $Revision: 1.90 $ 1 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
brd: module loaded
loop: module loaded
<6>r6040: RDC R6040 NAPI net driver,version 0.16 (10Nov2007)

<6>r6040: RDC R6040 NAPI net driver,version 0.16 (10Nov2007)

physmap flash device: 400000 at ffc00000
phys_mapped_flash: Found 1 x16 devices at 0x0 in 16-bit bank
 Amd/Fujitsu Extended Query Table at 0x0040
number of CFI chips: 1
cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.
RedBoot partition parsing not available
Using physmap partition definition
Creating 4 MTD partitions on "phys_mapped_flash":
0x00000000-0x001f0000 : "Kernel"
ftl_cs: FTL header not found.
0x001f0000-0x00200000 : "Config"
ftl_cs: FTL header not found.
0x00200000-0x003e0000 : "Initrd"
ftl_cs: FTL header not found.
0x003e0000-0x00400000 : "Redboot"
ftl_cs: FTL header not found.
PCI: Enabling device 0000:00:0a.1 (0000 -> 0002)
ehci_hcd 0000:00:0a.1: EHCI Host Controller
ehci_hcd 0000:00:0a.1: new USB bus registered, assigned bus number 1
ehci_hcd 0000:00:0a.1: irq 14, io mem 0xc1000000
ehci_hcd 0000:00:0a.1: USB 2.0 started, EHCI 1.00, driver 10 Dec 2004
usb usb1: configuration #1 chosen from 1 choice
hub 1-0:1.0: USB hub found
hub 1-0:1.0: 2 ports detected
ip_tables: (C) 2000-2006 Netfilter Core Team
arp_tables: (C) 2002 David S. Miller
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
Bridge firewalling registered
RPC: Registered udp transport module.
RPC: Registered tcp transport module.
NET: Registered protocol family 33
Using IPI Shortcut mode
RAMDISK: Compressed image found at block 0
VFS: Mounted root (ext2 filesystem).
Freeing unused kernel memory: 184k freed
Write protecting the kernel text: 2364k
Write protecting the kernel read-only data: 976k
Initializing random number generator... done.
Start S50StartSevice....
Configuration MTD Block Path ...
/dev/mtdblock/1
cat: /dev/mtdblock/1: No such file or directory
tar: Short read
******** NO configuration in Flash *******
******** Copy default configuration *******
configuration
configuration/wireless.conf
configuration/sysinfo.conf
configuration/storage.conf
configuration/udhcpd.conf
configuration/wan.conf
configuration/lan.conf
configuration/manage.conf
RDC Evaluation Board, model number is
R3210
********
in getmac
SIOCSIFFLAGS: Cannot assign requested address
ethernat up
in natbridge
SIOCGIFFLAGS: No such device
br0: Dropping NETIF_F_UFO since no NETIF_F_HW_CSUM feature.
can't add eth1 to bridge br0: Invalid argument
SIOCSIFFLAGS: Cannot assign requested address
########## Enable NAT ###########


Loading simple rc.firewall version 0.75..

   External Interface:  eth0
   Internal Interface:  eth1
   loading modules:   - Verifying that all kernel modules are ok
----------------------------------------------------------------------
ip_tables, ip_conntrack, ip_conntrack_ftp, ip_conntrack_irc, iptable_nat,
ip_nat_ftp,
----------------------------------------------------------------------
   Done loading modules.

   Enabling forwarding..
   Enabling DynamicAddr..
   Clearing any existing rules and setting default policy..
modprobe: could not parse modules.dep
iptables v1.2.11: can't initialize iptables table `nat': Table does not
exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
   FWD: Allow all connections OUT and only existing and related ones IN
iptables: No chain/target/match by that name
   Enabling SNAT (MASQUERADE) functionality on eth0
modprobe: could not parse modules.dep
iptables v1.2.11: can't initialize iptables table `nat': Table does not
exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

rc.firewall-2.4 v0.75 done.

BusyBox v1.2.2 (2007.06.18-08:24+0000) multi-call binary

Usage: route [{add|del|delete}]

Edit the kernel's routing tables.

Options:
	-n		Dont resolve names
	-e		Display other/more information
	-A inet		Select address family

in chkdhcps
Starting DHCP server: .
in setlanip
Starting ProFTPD: warning: `proftpd' uses 32-bit capabilities (legacy
support in use)
done
Starting SMB services: /etc/init.
Please press Enter to activate this console.



please can anyone tell me how to get rid of my problem .

With regards,
Keerti


-------------------------------------------------------------------
List admin: http://lists.arm.linux.org.uk/mailman/listinfo/linux-arm
FAQ:        http://www.arm.linux.org.uk/mailinglists/faq.php
Etiquette:  http://www.arm.linux.org.uk/mailinglists/etiquette.php