From mboxrd@z Thu Jan 1 00:00:00 1970 From: KOVACS Krisztian Subject: Re: lost UDP packets with matching NAT rules Date: Fri, 17 Feb 2006 10:43:19 +0100 Message-ID: <200602171043.19725@nienna> References: Mime-Version: 1.0 Content-Transfer-Encoding: QUOTED-PRINTABLE Return-path: In-reply-to: Content-disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="iso-8859-1" To: =?iso-8859-2?q?Keser=FB_Korn=E9l?= Cc: netfilter@lists.netfilter.org Hi, On Wednesday 15 February 2006 18.16, Keser=FB Korn=E9l wrote: > Thanks for the explanation! > Does this mean that a nat function, realized with a DNAT+SNAT rule > pair will not work for many-to-one connections? What I wanted to > realize with those rules is that UDP packets received from anywhere > (several sources) are forwarded to one concrete destination and the > source of the forwarded packets is always changed to the same. > If so, would a NOTRACK rule in the raw table help here (don't track > those connections)? Unfortunately not. You'd need stateless NAT for UDP, which is not (= yet)=20 implemented in Netfilter. (But occasionally it would be a really cool= and=20 useful feature.) --=20 KOVACS Krisztian