>Makes sense to me. Yea, I just don't know technically speaking where the -m mac should appear, in the POSTROUTING line, or the first FORWARD line. Ultimately I would only masq'ing to be done for this one device on port 443. >Is the host that you are wanting to bypass your proxy on the same segment as the $LAN interface defined in your rulesets? It is, how comes? I could filter by ip instead of mac but this is easier and although a non issue really, more secure. Thanks! jlc _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos
Re: Iptables Question
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
- To: "'CentOS mailing list'" <centos@xxxxxxxxxx>
- Subject: Re: Iptables Question
- From: "Joseph L. Casale" <JCasale@xxxxxxxxxxxxxxxxx>
- Date: Wed, 10 Dec 2008 14:29:21 -0700
- Accept-language: en-US
- Acceptlanguage: en-US
- Delivered-to: centos@xxxxxxxxxx
- In-reply-to: <cf939bff0812101322t593ded3ek25fa661af4fdb0bc@xxxxxxxxxxxxxx>
- References: <49627735003F5C479100225C339F9FE0DAFF3721AA@xxxxxxxxxxxxxxxxxxxxxx> <cf939bff0812101322t593ded3ek25fa661af4fdb0bc@xxxxxxxxxxxxxx>
- Thread-index: AclbDXr5AYFI8w8UTGi5qHyub//OWQAAH4mA
- Thread-topic: Iptables Question
- References:
- Iptables Question
- From: Joseph L. Casale
- Re: Iptables Question
- From: Joshua Gimer
- Iptables Question
- Prev by Date: Re: Iptables Question
- Next by Date: Re: pop3 attack
- Previous by thread: Re: Iptables Question
- Next by thread: iptables question
- Index(es):
 |