From: Marek Kierdelewicz <marek@piasta.pl>
To: netfilter@vger.kernel.org
Subject: SNAT and obsolete SAME
Date: Sun, 31 May 2009 20:02:49 +0200 [thread overview]
Message-ID: <20090531200249.27173129@catlap> (raw)
Hello,
SAME target has been marked obsolete and removed from netfilter some
time ago. Searching mailing list archives I have found some claims that
SNAT with address range specified behaves like SAME. Can anyone confirm
following rule working the way I think it should (to be compatible with
SAME behaviour)?
rule:
iptables -t nat -j SNAT --to 80.80.80.0-80.80.80.10 -s 192.168.0.0/24
1) Let's assume 192.168.0.10 connects to news.google.com. Outgoing
connection is SNATted to 80.80.80.1.
2) While previous connection is in ESTABLISHED state, 192.168.0.10
connects to yahoo.com. Connection is SNATted to 80.80.80.1.
3) Sleep 1000, after that host 192.168.0.10 has no connections in
ESTABLISHED state.
4) Host 192.168.0.10 one again connects to news.google.com. Outgoing
connection may be SNATted to address other then 80.80.80.1.
Should current implementation of SNAT target work according to above
scenario?
Cheers,
Marek Kierdelewicz
reply other threads:[~2009-05-31 18:02 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090531200249.27173129@catlap \
--to=marek@piasta.pl \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.