Re: Help on outgoing packet (without NAT)

[Jorge Bastos <mysql.jorge@decimal.pt>]

Hi,

> Your rule is absolutely incomplete and nonsense
>
> packet redirections should be done on the NAT table. If no table is
> specified on the command, you'll work on the filter table, which is 
> not
> the one you want here. So '-t nat' is needed.
>
> the '--redirect-to' is not an argument for any of the known targets
> i know .... but as it seems you want to redirect some packet to 
> another
> machine, than you'll probably want the DNAT target. Anyway, you have 
> not
> specified any target, so iptables simply doesnt know what to do.
>
> calling the correct target with correct argument, your rule should
> look something like:
>
> iptables -t nat -I OUTPUT -d 5.5.5.5 -p tcp --dport 80 -j DNAT
> --to-destination 192.168.1.221
>
> no need to specify the :80 port to the destination target. If you
> want to redirect to the same port, you dont need to specify that. You
> would need to specify if you were changing ports.

Well I was convinced that, since I'm not using NAT on this machine, 
this couldn't be done on the NAT table.
Thanks, after all, it works.

Jorge,