From: "Jörg Harmuth" <harmuth@mnemon.de>
To: netfilter@lists.netfilter.org
Subject: Re: MASQUERADING
Date: Thu, 21 Jul 2005 14:09:40 +0200 [thread overview]
Message-ID: <42DF9084.2060406@mnemon.de> (raw)
In-Reply-To: <Pine.LNX.4.61.0507211351150.9684@yvahk01.tjqt.qr>
Jan Engelhardt schrieb:
>>>Suppose I masquerade ppp0 using
>>>iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>>>
>>>And now all packets will have a src ip addr as 192.168.0.2 will be
>>>changed to that of ppp0 , for example say 10.10.10.1
>
>
> No, it does not say "changed to that of ppp0" but:
> _change_all_packets_that_go_out_of_ppp0_ (...to the address belonging to ppp0)
>
>
>>>Now my question is, when the reply comes, their destination addr will be
>>>that of ppp0 i.e 10.10.10.1
>>>Who will reverse translate this 10.10.10.1 destination addr to actual
>>>192.168.0.2 ?
>
>
>>This is the job of connection tracking, basically ipt_conntrack.
>
>
> Nitpick: ip_conntrack.
> ipt_conntrack is the module for the -m conntrack match used by iptables.
Oohps - my fault :) Thanks for correction.
Have a nice time,
Joerg
next prev parent reply other threads:[~2005-07-21 12:09 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-21 10:59 MASQUERADING Chandra.Vempali
2005-07-21 11:19 ` MASQUERADING Jörg Harmuth
2005-07-21 11:54 ` MASQUERADING Jan Engelhardt
2005-07-21 12:09 ` Jörg Harmuth [this message]
-- strict thread matches above, loose matches on Subject: below --
2003-10-31 3:19 Masquerading Fritz Mesedilla
2003-09-12 13:24 masquerading Cilliè Burger
2003-09-12 2:09 masquerading Wendy Moore
2003-09-12 5:04 ` masquerading Mark E. Donaldson
2003-02-24 10:40 masquerading Esteban
2003-02-24 17:07 ` masquerading Michael K
2003-02-24 8:50 masquerading Esteban
2003-02-24 10:21 ` masquerading hare ram
2003-02-24 10:33 ` masquerading Esteban Ribicic
2003-02-24 8:43 masquerading Esteban Ribicic
2002-10-21 23:51 Masquerading Wilson Fletcher
2002-10-23 9:53 ` Masquerading Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=42DF9084.2060406@mnemon.de \
--to=harmuth@mnemon.de \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox