From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Taylor, Grant" Subject: Re: snat Date: Mon, 02 May 2005 11:07:38 -0500 Message-ID: <4276504A.7040103@riverviewtech.net> References: Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Marco Berizzi wrote: > Hello everybody. > I would like to better understand the SNAT target. > Man states: > > "You can add several --to-source option. If you specify > more than one source address, either via an address range > or multiple --to-source options, a simple round-robin (one > after another in cycle) takes place between these addresses. > > I would like to know if this round-robin cycle is per packet > or per socket. > > TIA Don't hold me to this, but I think that the SAME target will implement some SNATing across multiple IPs and ensure that any given connection and possibly system will get the ""same source IP (hens the name) as it goes out. Can any one back me up on this? Grant. . . .