From mboxrd@z Thu Jan 1 00:00:00 1970 From: =?ISO-8859-1?Q?J=F6rg_Harmuth?= Subject: Re: MASQUERADING Date: Thu, 21 Jul 2005 13:19:56 +0200 Message-ID: <42DF84DC.7070007@mnemon.de> References: <04EE7AD0450F7B498BA216312943A1A102B5A7CA@blrse201.ap.infineon.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <04EE7AD0450F7B498BA216312943A1A102B5A7CA@blrse201.ap.infineon.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Chandra.Vempali@infineon.com schrieb: > Suppose I masquerade ppp0 using > iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE > > And now all packets will have a src ip addr as 192.168.0.2 will be > changed to that of ppp0 , for example say 10.10.10.1 > Now my question is, when the reply comes, their destination addr will be > that of ppp0 i.e 10.10.10.1 > Who will reverse translate this 10.10.10.1 destination addr to actual > 192.168.0.2 ? This is the job of connection tracking, basically ipt_conntrack. Have a nice time, Joerg