On Wed, Jan 08, 2003 at 07:37:21PM -0500, bauer@mit.edu wrote: > Is there a good reason that I am unable to conceive of at the > moment why SNAT is not a valid target in the OUTPUT chain of the > nat table? From 'man iptables': SNAT This target is only valid in the nat table, in the POSTROUTING chain. It specifies that the source address SNAT gets done just as packets go out, hence only in the POSTROUTING chain as you only know where they're going by then. -Ath -- - Athanasius = Athanasius(at)miggy.org / http://www.miggy.org/ Finger athan(at)fysh.org for PGP key "And it's me who is my enemy. Me who beats me up. Me who makes the monsters. Me who strips my confidence." Paula Cole - ME
Attachment:
pgp00258.pgp
Description: PGP signature