Re: How to do nat filtering in 1.4.3.2

[Leonardo Rodrigues <leolistas@solutti.com.br>]

Jorge Bastos escreveu:
> PS:Already tested and works perfectly. I guess this should be the place i
> should used the rules to do nat filtering from the beginning, correct?
>
>   

    absolutely !!! -t filter is the place to filter. -t nat is the place 
to do NAT-related stuff, and not filtering.

    if you wanna filter packets coming TO your firewall machine, then 
your rules should be in INPUT chain

    if you wanna filter packets going out FROM your firewall machine, 
then your rules should be in OUTPUT chain

    if you wanna filter packets passing your firewall (ie, getting 
routed), then your rules should be in FORWARD chain. Remember that 
packets go and come, so depending the case, 2 rules are necessary to 
fully accept a forwarded packet



-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it