From: Vigneswaran R <vignesh@atc.tcs.com>
To: "krzf83@gmail.com" <krzf83@gmail.com>
Cc: "netfilter@vger.kernel.org" <netfilter@vger.kernel.org>
Subject: Re: OUTPUT: nat after filter (2nd nat). Please help :(
Date: Tue, 14 May 2013 11:37:11 +0530 [thread overview]
Message-ID: <5191D48F.3010301@atc.tcs.com> (raw)
In-Reply-To: <CAJ1PRSnzBFnjd5hQbzVs0u2CSBH5ZfwmtUN05+DhvjrDmxWbqA@mail.gmail.com>
On 05/14/2013 11:27 AM, krzf83@gmail.com wrote:
> Unfortunetly postrouting has not DNAT (only SNAT).
Oops.. I missed that.
> I figured only option is to rewrite all filters with conntrack and
> --ctorigdst --ctorigdstport, but contrack has to iprange. Only other
> option is to put filter rules in raw or mangle table. Both require
> huge rewrite of filter rules and thats only because iptables can't
> filter before DNAT :/ weird.
I think, if you give more details about your setup, people can help.
Regards,
Vignesh
prev parent reply other threads:[~2013-05-14 6:07 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-05-14 4:35 OUTPUT: nat after filter (2nd nat). Please help :( krzf83@gmail.com
2013-05-14 5:30 ` Vigneswaran R
[not found] ` <CAJ1PRSnzBFnjd5hQbzVs0u2CSBH5ZfwmtUN05+DhvjrDmxWbqA@mail.gmail.com>
2013-05-14 6:07 ` Vigneswaran R [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5191D48F.3010301@atc.tcs.com \
--to=vignesh@atc.tcs.com \
--cc=krzf83@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox