From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Diego R. Rodriguez Herlein" Subject: Re: POSTROUTING & DNAT Date: Wed, 10 Sep 2003 00:39:43 -0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1b7301c3774d$2d14a260$8201a8c0@lw1dqwin> References: <000501c32062$42b751e0$6901a8c0@tailor> Reply-To: "Diego R. Rodriguez Herlein" Mime-Version: 1.0 Content-Transfer-Encoding: 7BIT Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Leszek Zur , netfilter@lists.netfilter.org Sorry those are my rules (DMZ) HTTP # iptables -t nat -A PREROUTING -p tcp -d $IP_REAL --dport 80 -j DNAT \ --to-destination $IP_DMZ iptables -t nat -A POSTROUTING -p tcp -d $IP_DMZ --dport 80 -j SNAT \ --to-source $IP_LAN iptables -t nat -A OUTPUT -p tcp -d $IP_REAL --dport 80 -j DNAT \ --to-destination $IP_DMZ # # # work great with rh 7.1 kernel 2.4.17 ----- Original Message ----- From: "Leszek Zur" To: Sent: Thursday, May 22, 2003 10:01 AM Subject: POSTROUTING & DNAT > Hello > > iptables -t nat -A OUTPUT -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 > iptables: Invalid argument > > Can anyone help me understand what is happening? > > iptables v1.2.8 > kernel 2.4.20 > > thnx > > Leszek > > >