From: Greg Cope <gregcope@gmail.com>
To: Jason Opperisano <opie@817west.com>, netfilter@lists.netfilter.org
Subject: Re: How to Get a DMZ hosts's trafic routed via a particular IP address on a firewall - NOW solved
Date: Fri, 6 May 2005 15:57:39 +0100 [thread overview]
Message-ID: <c0e9781f050506075726b2942e@mail.gmail.com> (raw)
In-Reply-To: <20050506144027.GA27512@bender.817west.com>
> not even...bill joy?
Hum...
> remember the part where i said, "make sure the 2nd rule comes *before*
> any outbound SNAT/MASQ rule that is less specific"...i do--man, those
> were good times.
> anyways, since you match all 192.168.0.0/16 traffic with the MASQ rule,
> the SNAT rule for 192.168.254.3 will never be matched.
>
> translation: put the dang SNAT rule for the mail server first.
>
Ah - thanks - I am SURE I tried that.....
Anyway this now works with:
$IPTABLES -t nat -A POSTROUTING -o ${INET_IFACE} -s $DMZ_MAIL_IP -p
tcp --dport 25 -j SNAT --to-source $MAIL_INET_ALIAS
Many, many, many thanks.
Greg
> -j
>
> --
> "Lois: I'll be just like Hillary Clinton, only you know, without the
> penis."
> --Family Guy
>
>
prev parent reply other threads:[~2005-05-06 14:57 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-05-05 16:31 How to Get a DMZ hosts's trafic routed via a particular IP address on a firewall? Greg Cope
2005-05-05 21:34 ` Jason Opperisano
2005-05-06 14:36 ` Greg Cope
2005-05-06 14:40 ` Jason Opperisano
2005-05-06 14:57 ` Greg Cope [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c0e9781f050506075726b2942e@mail.gmail.com \
--to=gregcope@gmail.com \
--cc=netfilter@lists.netfilter.org \
--cc=opie@817west.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.