On Monday 01 March 2004 11:56 pm, Felipe wrote: > It's necessary to set up phisically the public address used in SNAT rule ? > For this rule: > > iptables -t nat -A POSTROUTING -s 172.21.0.0/16 -j SNAT --to 200.110.2.181 > > For that rule, its necessay set up phisically the IP 200.110.2.181 over the > interface ? No, it is not necessary to set up that address on that interface in order to use that rule and send out packets with that source address. However, if you send out packets with that source address, and you want to receive the replies, the address must exist on whatever machine the address will get routed to. If you are only doing UDP transmits, and never expect a reply, it might work. Regards, Antony. -- "The joy of X!!?? I've always hated compiling graphical shite. You have a 10 line program, and it ends up depending on the entire known universe." - Philip Hands Please reply to the list; please don't CC me.