* Re: [netfilter-core] 1.3.6 and newer disallows IP ADDRESS argument to REDIRECT [not found] <062320081433.10930.485FB42B0002149300002AB22209224627020A9A9E0C030A050703@comcast.net> @ 2008-06-23 16:21 ` Patrick McHardy 0 siblings, 0 replies; only message in thread From: Patrick McHardy @ 2008-06-23 16:21 UTC (permalink / raw) To: mikemcquen; +Cc: coreteam, Netfilter Development Mailinglist Please post questions like this to netfilter-devel. mikemcquen@comcast.net wrote: > why? > There is no longer a mechanism for doing this: > > iptables -t -nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 443 -j REDIRECT --to 1.1.1.1 > > I just replaced a bunch of proxy machines and my config no longer works! This was never supported, REDIRECT always choses the first IP from the incoming device. My guess is that you either used DNAT before or the argument parser used to be less strict and ignored unknown arguments. ^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2008-06-23 16:21 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <062320081433.10930.485FB42B0002149300002AB22209224627020A9A9E0C030A050703@comcast.net>
2008-06-23 16:21 ` [netfilter-core] 1.3.6 and newer disallows IP ADDRESS argument to REDIRECT Patrick McHardy
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox