From: Harout Hedeshian <harout@hedeshian.net>
To: Alex Barylo <abarylo@gmail.com>, netfilter@vger.kernel.org
Subject: Re: Rewriting target IP and port on Linux with iptables or firewall-cmd
Date: Fri, 4 Mar 2016 16:06:54 -0700 [thread overview]
Message-ID: <56DA150E.1020507@hedeshian.net> (raw)
In-Reply-To: <CAG8kwsqB_MPq5JX_yyw6+s4hZd5p=tfg=cN_MQ=fejD-7rQKoA@mail.gmail.com>
On 03/04/2016 12:45 PM, Alex Barylo wrote:
> I see neither traffic to 10.x or to 216.x with tcpdump on the host in
> DC2 where I'm trying to rewrite.
Just to check the obvious, have you checked your FORWARD chain in the
filter table to make sure you are not accidentally dropping it?
> A side question: is there a way for me to see how traffic moves
> between/through chains?
Yes. Take a look at the iptables trace target (there are a handful of
tutorials out there).
Also, I would also suggest dumping iptables with the -v option, it will
give you a match count of your rules. That way you can see if it is even
matching at all.
> Any pointers are greatly appreciated.
>
> Thanks,
> Alex.
>
>
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
next prev parent reply other threads:[~2016-03-04 23:06 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-03-04 19:45 Rewriting target IP and port on Linux with iptables or firewall-cmd Alex Barylo
2016-03-04 23:06 ` Harout Hedeshian [this message]
2016-03-05 0:32 ` Sven-Haegar Koch
2016-03-06 20:52 ` Pascal Hambourg
2016-03-08 0:25 ` Alex Barylo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=56DA150E.1020507@hedeshian.net \
--to=harout@hedeshian.net \
--cc=abarylo@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.