Re: DNAT from an IP address that does not exist to another that exists

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Aug 07, 2003 at 02:55:28PM +0800, Carlo Florendo wrote:

> So this means that:     
> 
> iptables -t nat -I POSTROUTING -s 192.168.30.0/24 -d 192.168.30.11 \ -j MASQUERADE  (your solution)
> 
> and 
> 
> iptables -I POSTROUTING -t nat -s 192.168.30.0/24 -o $INTDEV -d \ 
>     192.168.30.11 -j SNAT --to 192.168.30.1 (c/o George Vieira)
> 
> are equivalent (given that 192.168.30.1 is the gateway).

They get you to the same place. But it's said that SNAT is more resource
efficient.

Whit


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux