Re: Strange MASQUERADING behaviour, bug or feature?

[Martijn Lievaart <m@rtij.nl>]

Amin Azez wrote:

> Martijn Lievaart wrote:
>
>> Hey, that is the wrong source address! Now when I kill the null0 
>> interface, suddenly the source address changes to the correct 
>> (169.254.1.1) address. Also when I stop the ping and restart it, the 
>> source address is correct.
>
>
> Thats how NAT works.
>
> The address mappings are setup when the conntrack is created.
>
> You observed that this is less obviously-right for generally stateless 
> streams like ping, but it is certainly consistent and makes sense, and 
> is neccessary for tcp or udp connections, or they would break 
> everytime other routes went up or down.


For SNAT, I can understand this. For MASQUERADE, this is probably also 
the correct behaviour. However, why is this "ping stream" seen as one 
contrack?

But other than that, yes I see now that I cannot use this form  of dial 
on demand with MASQUERADING. Too bad.

Thanks,
M4