Redirection using DNAT on transparent bridge.

[Josh Nerius <jnerius@gmail.com>]

Hello,

I am trying to redirect specific traffic, (for example, web traffic on
port 80) as it passes through a transparent bridge. Currently, I have
tried commands like this: (eth1 is external interface, eth0
internal...ths is sitting behind a linux nat router)

iptables -t nat -A PREROUTING -m physdev --physdev-in eth0 -s
192.168.150.222 -p tcp --dport 80 -j DNAT --to
destination.ip.address.here

The trouble I am running into seems to be related to routing I
think...I have an ip address set on the bridge virtual interface and
this communicates with the net just fine. I have been unable to find
documentation on this and would like to know if this is even possible?

Oh yes, I should also mention that if I change the DNAT to a host on
the other side of the bridge that is in the local lan (i.e. the router
or other test boxes I've put on a switch for experimentation) the
redirection seems to work.

Any info is greatly appreciated,

Josh Nerius

-- 
Math problems? Call 1-800-[(10x)(13i)^2]-[sin(xy)/2.362x]