From mboxrd@z Thu Jan  1 00:00:00 1970
From: Jan Humme <jan.humme@xs4all.nl>
Subject: Re: I need help , please
Date: Thu, 4 Jul 2002 21:31:38 +0200
Sender: netfilter-admin@lists.samba.org
Message-ID: <02070421313802.06327@Lms>
References: <001e01c22321$e86018a0$2400a8c0@inq7.net> <02070420590401.06327@Lms> <20020704190130.YPAF4626.mta02-svc.ntlworld.com@there>
Reply-To: jan.humme@xs4all.nl
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Return-path: <netfilter-admin@lists.samba.org>
In-Reply-To: <20020704190130.YPAF4626.mta02-svc.ntlworld.com@there>
Errors-To: netfilter-admin@lists.samba.org
List-Help: <mailto:netfilter-request@lists.samba.org?subject=help>
List-Post: <mailto:netfilter@lists.samba.org>
List-Subscribe: <http://lists.samba.org/listinfo/netfilter>,
	<mailto:netfilter-request@lists.samba.org?subject=subscribe>
List-Id: <netfilter.vger.kernel.org>
List-Unsubscribe: <http://lists.samba.org/listinfo/netfilter>,
	<mailto:netfilter-request@lists.samba.org?subject=unsubscribe>
List-Archive: <http://lists.samba.org/pipermail/netfilter/>
Content-Type: text/plain; charset="us-ascii"
To: Antony Stone <Antony@Soft-Solutions.co.uk>
Cc: netfilter@lists.samba.org

On Thursday 04 July 2002 21:01, Antony Stone wrote:
> On Thursday 04 July 2002 7:59 pm, Jan Humme wrote:
> > On Thursday 04 July 2002 20:51, Antony Stone wrote:
> > > On Thursday 04 July 2002 7:48 pm, Jan Humme wrote:
> > > > On Thursday 04 July 2002 20:20, Antony Stone wrote:
> > > > > # Redirect http requests to local proxy
> > > > > iptables -A PREROUTING -t nat -p tcp --dport 80 -j DNAT
> > > > > 127.0.0.1:80
> > > >
> > > > Antony, just for my understanding: is this any different from:
> > > >
> > > > iptables -A PREROUTING -t nat -p tcp --dport 80 -j REDIRECT   ?
> > >
> > > No.   I just find the name 'redirect' a bit ambiguous (I mean, it could
> > > redirect it somewhere else, couldn't it, but no, it only redirects it
> > > to the local machine...) therefore I use DNAT which I'm familiar with
> > > from other uses.
> >
> > OK, and agree.
> >
> > But I am somewhat surprised to find such redundant syntax at this level.
>
> I could have written it as
>
> iptables -A PREROUTING -t nat -p tcp --dport 80 -j DNAT 127.0.0.1
>
> if you prefer :-)

I was in fact refering to the redundant design of the iptables syntax, and 
not to your beautiful piece of nat-art, Anthony ;-) !

Jan Humme.