pktstat and netfilter

Edmund <cc@xxxxxxxxxxxxx> · Tue, 05 Aug 2003 15:52:21 +0800

Hi,

I'm running iptables (latest version) on a 2.4.21
Linux machine.  I use pktstat to view the general
packet movement.  Setup as follows:

Internet -> eth0 (<- iptables ->) eth1 -> LAN

I'm not sure where pktstat comes into play in
the above chart.

Anyway, today I was majorly surprised to see
a Local IP sending a packet to a remote LAN
on port 80.

   tcp  192.168.10.3:2041 <-> x.x.x.x:80

Is this supposed to happen?  Assuming that
pktstat listens to the resulting packet
after NAT'd, shouldn't the 192.168.10.3
be my actual Internet IP?

Any help appreciated.