i am also going to post this here, as it may be a vrrp iptables issue: i am setting up a redundant firewall solution using keepalived(vrrp) and iptables. i use iptables snat to change the source of the traffic from the firewall to the vrrp virtual address: iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.208.69 my question, why don't the vrrp advertisements get snat'ed? not that i want them to, i don't. but by not specifying a protocol in the above iptables statement all traffic leaving the box should get snat'ed, right? any help with this is appreciated.
