[ale] iptables dnat

[jknapka at kneuro.net (JK)]

James P. Kinney III wrote:

> Does iptables dnat change the originating IP address? Is it supposed to?
> 
> Packet from 1.1.1.1 hits iptables destined to 10.10.10.10. That external
> address is dnat'ed to 192.168.0.10 and then the packet is sent to the
> the final address.
> 
> I have a system that seems to be changing the source IP of dnat packets
> so that all connections appear to come from the iptables machine and not
> the outside.

Is there also perhaps a MASQ rule on the outgoing interface?

-- JK