From mboxrd@z Thu Jan 1 00:00:00 1970 From: Robert Nichols Subject: Re: port 80 out new ISP Date: Fri, 19 Aug 2005 19:00:23 -0500 Message-ID: References: <430600E4.3090004@eccotours.dyndns.org> <200508191205.22196.rob0@gmx.co.uk> <43061F87.1030507@eccotours.dyndns.org> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <43061F87.1030507@eccotours.dyndns.org> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org Brent Clark wrote: > iptables -t nat -A PREROUTING --dport 80 -j LOG > Aug 19 18:40:32 gate kernel: IN=eth1 OUT= > MAC=00:00:f4:af:80:b8:00:60:67:77:aa:92:08:00 SRC=192.168.111.213 > DST=66.36.247.82 LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=2925 DF PROTO=TCP > SPT=4032 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 > > Notice that "OUT=" does not show eth2 Of course not. In the PREROUTING stage no decision about where to send the packet has yet been made. -- Bob Nichols Yes, "NOSPAM" is really part of my email address.