* Re: Re: ROUTE + SNAT Problem
@ 2004-02-05 10:12 tonton19
0 siblings, 0 replies; only message in thread
From: tonton19 @ 2004-02-05 10:12 UTC (permalink / raw)
To: blancher, netfilter
> As far as I can remember, use of ROUTE target stops NF_IP_POST_ROUTING
> crossing to send packet directly. For mangle table is prior to nat one,
> then SNAT rules are not evaluated.
> You should have a look to very last patch-o-matic (maybe still CVS)
> where ROUTE target include a special option for continue hook traversal.
> See :
>
> http://cvs.netfilter.org/netfilter/patch-o-matic/extra/ROUTE.patch
>
> "Updated version with new option to continue rule-traversal
> (Cedric de Launois)"
>
>
I made a little test and I think you're right : it seems to be ok with --continue option in the ROUTE target :
# iptables -t mangle -A POSTROUTING -d 173.20.0.210 -p tcp --dport 80 -j ROUTE --oif eth0 --continue
Merci beaucoup de ton aide !
gwen
------------------------------------------
Faites un voeu et puis Voila ! www.voila.fr
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-02-05 10:12 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-02-05 10:12 Re: ROUTE + SNAT Problem tonton19
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.