From: prabha <prabha@multitech.co.in>
To: clister <clister@uah.es>,
"netfilter@lists.netfilter.org" <netfilter@lists.netfilter.org>
Subject: Re: local connections getting natted
Date: Wed, 04 Feb 2004 11:24:50 +0530 [thread overview]
Message-ID: <4020892A.6FB4D142@multitech.co.in> (raw)
Hi
> 185K 8942K SNAT all -- * eth0 0.0.0.0/0
0.0.0.0/0
to:1.2.3.4
This rule will change the source address of all the packet going out of
the eth0 interface. (Irrespective of whether they are local packets or
forwarded packets)
>I thought this happened only if you create such rule on NAT::ouput so
local
>connections get natted prior to go out of the box.
The NAT:OUTPUT chain will do a NAT for local packets (ie) packets
generated by the local machine.
>Should i change this to:
>-t nat -A POSTROUTING -i eth1 -o eth0 -j SNAT --to-destination:1.2.3.4
to
>avoid local packets getting natted?
Yes, this should work.
>and last question:
>All packets leaving routing code (local, forwarded) pass througth
>POSTROUTING chain at nat table or only forwarded packets?
Yes, all the packets will pass through the POSTROUTING chain.
Prabha
next reply other threads:[~2004-02-04 5:54 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-04 5:54 prabha [this message]
2004-02-04 9:00 ` topic local connections getting natted clister
-- strict thread matches above, loose matches on Subject: below --
2004-02-02 3:28 Iptables SNMP chandramouli P H
2004-02-03 10:07 ` local connections getting natted clister
2004-02-04 3:26 ` Kiran Kumar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4020892A.6FB4D142@multitech.co.in \
--to=prabha@multitech.co.in \
--cc=clister@uah.es \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox