From: Martin Josefsson <gandalf@wlug.westbo.se>
To: Ranjeet Shetye <ranjeet.shetye2@zultys.com>
Cc: Netfilter <netfilter@lists.netfilter.org>
Subject: Re: Problems after recompiling iptables 1.2.7 ..
Date: 20 Jan 2003 19:17:49 +0100 [thread overview]
Message-ID: <1043086669.668.24.camel@tux.rsn.bth.se> (raw)
In-Reply-To: <1043049940.4920.4.camel@knoppix>
On Mon, 2003-01-20 at 09:05, Ranjeet Shetye wrote:
> > Shouldn't be specified an output interface/address with the -o option?
> > Moreover, I think that if you want to do source nat, you should do it in the
> > POSTROUTING chain. Try this (the existence of another network card eth1 is
> > presumed):
> >
> > iptables -t nat -A POSTROUTING -i eth0 -o eth1 -s 192.168.0.0/24 -j SNAT
> > --to-source 196.4.160.2
> >
> > --
> > Fabio Corneti
> > fabio@gekolab.it
> >
>
> You are right.
>
> SNAT MUST be done in the POSTROUTING chain.
>
> Also, it MUST take an outgoing interface.
>
> The incoming interface MAY BE specified if you have specific needs.
This is incorrect.
It is correct that SNAT must be performed in the nat/POSTROUTING chain.
but it is OPTIONAL to specify an outgoing interface. And you can NEVER
specify an incoming interface in POSTROUTING.
--
/Martin
Never argue with an idiot. They drag you down to their level, then beat you with experience.
prev parent reply other threads:[~2003-01-20 18:17 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-01-20 7:59 Problems after recompiling iptables 1.2.7 Raymond Leach
2003-01-20 13:32 ` Fabio Corneti
2003-01-20 8:05 ` Ranjeet Shetye
2003-01-20 18:17 ` Martin Josefsson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1043086669.668.24.camel@tux.rsn.bth.se \
--to=gandalf@wlug.westbo.se \
--cc=netfilter@lists.netfilter.org \
--cc=ranjeet.shetye2@zultys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox