[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[ale] SNAT issues
- Subject: [ale] SNAT issues
- From: jknapka at kneuro.net (JK)
- Date: Wed, 28 Oct 2009 10:19:47 -0600
- In-reply-to: <1256744539.12851.128.camel@compaq>
- References: <1256738505.12851.113.camel@compaq> <[email protected]> <1256741638.12851.124.camel@compaq> <[email protected]> <1256744539.12851.128.camel@compaq>
Chris Fowler wrote:
> On Wed, 2009-10-28 at 11:08 -0400, Jim Kinney wrote:
>> docs are correct. They are for DNAT not SNAT.
>
> The last example on that page shows a SNAT rule. Is that syntax wrong?
I think it is. I tripped over this same issue a while back. I believe some
older versions of iptables (et al) accepted --to-destination as a SNAT
option, but that has apparently changed.
-- JK
> Example 5.7: Simulating full NAT with SNAT and DNAT
> [root at real-server]# iptables -t nat -A PREROUTING -d 205.254.211.17 -j
> DNAT --to-destination 192.168.100.17
> [root at real-server]# iptables -t nat -A POSTROUTING -s 192.168.100.17 -j SNAT --to-destination 205.254.211.17
>
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
>
>