--- Cedric Blancher <blancher@xxxxxxxxxxxxxxxxxx> a écrit : > On 2.6 kernels, output interface will be br0, not > eth0. So you'll have > to use physdev match in order to have your rule work > : > iptables -t nat -A POSTROUTING -m physdev > --physdev-out eth1 \ > -j SNAT --to 192.168.0.21 > > I don't know if this behaviour has been backported > to 2.4 kernels. At > least, you can try ;) I thought you could only use the FORWARD CHAIN when it's a bridge, because a bridge only passes packets from one interface to another (?) _________________________________________________________________ Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français ! Yahoo! Mail : http://fr.mail.yahoo.com