From mboxrd@z Thu Jan 1 00:00:00 1970 From: Willi Mann Subject: Re: SNAT kills local stuff? Date: Mon, 14 Jul 2003 22:07:02 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F130D66.30505@wm1.at> References: <20030714184402.742.30442.Mailman@kashyyyk> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20030714184402.742.30442.Mailman@kashyyyk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org, busby@pnts.com Please tell us what you mean by "connect out". Do you mean connections to any other host or do you mean connections to hosts outside your LAN? My guess is that the problem occurs because all packets go through the POSTROUTING chain, not only packets that will go to the Internet. That's why most examples use (only) -o. I'd suggest to analyze your IP-Traffic with ethereal. WM