From: "moniacheli@tiscali.it" <moniacheli@tiscali.it>
To: netfilter@lists.netfilter.org
Subject: packet filter rules updating
Date: Wed, 31 May 2006 17:56:07 +0200 (CEST) [thread overview]
Message-ID: <6770617.1149090967505.JavaMail.root@ps12> (raw)
This is my problem.
I have configured iptables for modifying ip source
of syslog packets outgoing from one of my router interfaces.
I have used these commands:
iptables -t mangle -A OUTPUT -p udp --dport 514 -j MARK --set-mark 13
iptables -t nat -A POSTROUTING -m mark --mark 13 -j SNAT --to-source
2.2.2.2
With the commands
iptables -t nat -L
iptables -t mangle -L
I can see that the previous rules have been correctly inserted and the
syslog
packets have the right ip source.
If I delete the previuos rules, I have no effect on syslog traffic and
also if I
give new iptables command with different ip source
(Es. iptables -t nat -A POSTROUTING -m mark --mark 13 -j SNAT --to-
source 3.3.3.3)
syslog pkt maintains the previous ip source (2.2.2.2) while no rule is
configured
with this ip.
Is there some iptables options that I have to give to force the rules
updating?
Thanks a lot for your collaboration!
Monia Cheli
La gara più entusiasmante dell'anno!
Gioca e corri alla velocità della luce sui 18 circuiti di Intel Speed Contest 2006!
I più bravi vincono Notebook Sony VAIO, iPod da 60 GB e altro ancora...
Sfida gli amici!
http://intelspeedcontest2006.tiscali.it/
next reply other threads:[~2006-05-31 15:56 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-05-31 15:56 moniacheli [this message]
2006-05-31 22:05 ` packet filter rules updating Pascal Hambourg
2006-06-01 5:48 ` Philip Craig
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=6770617.1149090967505.JavaMail.root@ps12 \
--to=moniacheli@tiscali.it \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.