Re: DNAT/SNAT stuff

["P.Italiaander" <pc-secure@home.nl>]

Op zondag 11 mei 2003 11:20, schreef Francois LE BOURDELLES:
> Hello ,
>
> I just posted a similar question related to the same subject :
> nating a full subnet (as described in the NAT howto) that doesn't seems
> to work !
> in fact it seems that the --to A.B.C.D/X fromat is not implemented (or
> has been removed ?)
>
> I'm waiting for a response ... from the list or the authors ....
>
> Regards.
>
> Le jeu 08/05/2003 à 11:39, mdew a écrit :
> > current setup,
> >
> > $IPTABLES -t nat -A PREROUTING -i eth0 -d 210.54.175.12 -p tcp --dport
> > 4661 -j DNAT --to 10.0.0.3
> > $IPTABLES -t nat -A PREROUTING -i eth0 -d 210.54.175.12 -p tcp --dport
> > 4662 -j DNAT --to 10.0.0.3
> > $IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.3 -p tcp --sport 4661
> > -j SNAT --to 210.54.175.12
> > $IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.3 -p tcp --sport 4662
> > -j SNAT --to 210.54.175.12
> > $IPTABLES -t nat -A PREROUTING -i eth0 -d 210.54.175.12 -p udp --dport
> > 4665 -j DNAT --to 10.0.0.3
> > $IPTABLES -t nat -A PREROUTING -i eth0 -d 210.54.175.12 -p udp --dport
> > 4672 -j DNAT --to 10.0.0.3
> > $IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.3 -p udp --sport 4665
> > -j SNAT --to 210.54.175.12
> > $IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.3 -p udp --sport 4672
> > -j SNAT --to 210.54.175.12
> >
> > i would like specify 10.0.0.x instead of 10.0.0.3, how is this done?
> >
> > and some problems i had attempting it..
> >
> > Try `iptables -h' or 'iptables --help' for more information.
> > iptables v1.2.6a: Bad IP address `10.0.0.0/24'
> > iptables v1.2.6a: host/network `10.0.0.3-10.0.0.8' not found
> > Try `iptables -h' or 'iptables --help' for more information.
> >
> > cc: please :)

I tested this rule and works fine:

$IPTABLES -t nat -A POSTROUTING -o eth0 -s 10.0.0.0/24 -p udp --sport 4665
 -j SNAT --to 210.54.175.12

Pascal