From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jason Opperisano Subject: Re: msn and yahoo messenger voice chat Date: Mon, 11 Apr 2005 18:19:40 -0400 Message-ID: <20050411221940.GA23947@bender.817west.com> References: <002a01c53ccd$9fd13f60$6e5577d4@winntpro> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <002a01c53ccd$9fd13f60$6e5577d4@winntpro> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org On Sat, Apr 09, 2005 at 09:30:29AM +0300, Wennie V. Lagmay wrote: > Hi all, > > Below are the config I tested and results: > > 1. IPTABLES -A POSTROUTING -s 192.169.10.0/255.255.255.0 -j SNAT --to-source > xxx.xxx.85.113-xxx.xxx.85.115 > 2. IPTABLES -A POSTROUTING -s 192.169.10.0/255.255.255.0 -d > xxx.xxx.85.113 -j MASQUERADE > 3. IPTABLES -A POSTROUTING -s 192.169.10.0/255.255.255.0 -j MASQUERADE > > config 1, everything is working fine except msn and yahoo messenger voice > chat. > config 2, everything is working fine except msn and yahoo messenger voice > chat. > config 3, everything is working fine including msn and yahoo messenger voice > chat, the only problem is that this configuration is not fitted to our > setup. Can anybody have an idea on using config 1 and 2 with msn and yahoo > messenger voice chat enable? or do you have any solution enabling similar to > config 1 with all features enable? use the SAME target from PoM to tell iptables to use the same SNAT IP for subsequent connections between the same src and dst IP: iptables -t nat -A POSTROUTING -s 192.169.10.0/24 \ -j SAME --to xxx.xxx.85.113-xxx.xxx.85.115 -j -- "Peter: You wanna talk about awkward moments? Once, during sex, I called Lois "Frank". Your move, Sherlock." --Family Guy