From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Adam D. Barratt" Subject: Re: Port forwarding doesn't work. Date: Mon, 13 Oct 2003 15:32:02 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <073301c39196$c4e2ddb0$eb00010a@andromeda> References: <200310121411.00898.Herman@AerospaceSoftware.com> <1065994862.3562.10.camel@Marvin> <200310121604.06545.Herman@AerospaceSoftware.com> <1066029196.4010.1.camel@Marvin> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Gerd Zemella wrote, Monday, October 13, 2003 8:13 AM [Please *don't* post HTML to the list] > Hi Herman, > > Am Mon, den 13.10.2003 schrieb Herman um 00:04: > > > Well, here goes: > > iptables -t nat -I PREROUTING -d 192.168.10.100 -j DNAT --to 192.168.10.245 > > did you wrote this --to? you must write --to-destination! Nope. In context, --to is equivalent to --to-destination. There's absolutely nothing wrong with using it in the manner above (in fact, every single DNAT rule in our firewall script does -j DNAT --to). Adam