All of lore.kernel.org
 help / color / mirror / Atom feed
From: Wilson Fletcher <wilsonf@mclachlan.com.au>
To: netfilter@lists.netfilter.org
Subject: Masquerading
Date: Tue, 22 Oct 2002 09:51:31 +1000	[thread overview]
Message-ID: <3DB49303.3050408@mclachlan.com.au> (raw)

Just looking at iptables.

Normally a reply to a masq'd packet coming into the network will
have the destination IP of the g/w. So if the NAT for masq is done
in POSTROUTING (after filtering) do I need to except INPUT packets
to ports in the masquerading range (~61000:65535 ????) ?

The Linux 2.4 Packet Filtering HOWTO appears to suggest that I can
ignore the fact that I'm nat'ing and use forwarding rules for packets
being masq'd and de-masq'd and that I do not need to worry about
INPUT for packets that are going to my masq'd range.

Have I understood this correctly ?

thanks,

Wilson

P.S. I'm not subscribed here. Can you reply to:
research at mclachlan dot com dot au



             reply	other threads:[~2002-10-21 23:51 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-21 23:51 Wilson Fletcher [this message]
2002-10-23  9:53 ` Masquerading Antony Stone
  -- strict thread matches above, loose matches on Subject: below --
2003-02-24  8:43 masquerading Esteban Ribicic
2003-02-24  8:50 masquerading Esteban
2003-02-24 10:21 ` masquerading hare ram
2003-02-24 10:33   ` masquerading Esteban Ribicic
2003-02-24 10:40 masquerading Esteban
2003-02-24 17:07 ` masquerading Michael K
2003-09-12  2:09 masquerading Wendy Moore
2003-09-12  5:04 ` masquerading Mark E. Donaldson
2003-09-12 13:24 masquerading Cilliè Burger
2003-10-31  3:19 Masquerading Fritz Mesedilla
2005-07-21 10:59 MASQUERADING Chandra.Vempali
2005-07-21 11:19 ` MASQUERADING Jörg Harmuth
2005-07-21 11:54   ` MASQUERADING Jan Engelhardt
2005-07-21 12:09     ` MASQUERADING Jörg Harmuth

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3DB49303.3050408@mclachlan.com.au \
    --to=wilsonf@mclachlan.com.au \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.