Dear all, There is a question has puzzled me for a long time. You can find the topology from attachment. Normal traffic is: PC(192.168.1.8)--->Bridge(eth0)--->Bridget(eth1)--->NAT server-->switch--->Server(192.168.5.3) Now I want the ssh traffic like this: PC(182.168.1.8)--->Bridge(eth0)--->eth2--->NAT server--->switch--->Server(192.168.5.3) What I have done on LINUX Server: #net.bridge.bridge-nf-call-iptables = 1 #iptables -t nat -A POSTROUTING -s 192.168.1.8 -p tcp --dport 22 -j SNAT --to-source 192.168.5.2 I have find the rule matched through command "iptables -t nat -nvL", but the packets doesn't sent to 192.168.5.3. and "tcpdump -i eth2 tcp port 22" can not capture any packet! Thanks very much!
Attachment:
topology.jpg
Description: JPEG image