Re: Error in Masquerade ??

["Leandro Silva" <lansoweb@gmail.com>]

Hello Jorge !

Thanks for the response.
When i have a fixed ip i can use SNAT, but i have some dsl links with
dynamic ip so i can't use SNAT :-(

Leandro

-------
Leandro:

You need another rule to alter the source ip address of the outgoing packets.

iptables -t nat -A POSTROUTING -o eth0 \ -j SNAT --to-source <server_address>

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Jorge.

El vie, 10-03-2006 a las 12:01 -0300, Leandro Silva escribió:
> I have the following rule in my firewall:
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE And that's the
> only rule if postrouting chain. It's working fine but from time to
> time a packet leaves the server with the original ip and not with the
> server's. It's happening  like 1 "wrong" packet for 100 or 200 ok.
> I've tried in other servers with same results and different
> "Mandrakes" ( 9.1, 10,1 and 2006.0 ). And different cpus ( p3, p4,
> amd, all with 512 mb ram ).
> Any ideias ?
>
> Thanks a lot
> Leandro
>
--
Jorge Isaac Davila Lopez
Nicaragua Open Source
+505 808 2478
davila@nicaraguaopensource.com