Re: SNAT question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Is there any special configuration to do this, perhaps any kernel values?
That's because without set up the ip on the interface that rule doesn't work

Thanks

Felipe

Antony Stone <Antony@xxxxxxxxxxxxxxxxxxxx> escribió:

> On Monday 01 March 2004 11:56 pm, Felipe wrote:
> 
> > It's necessary to set up phisically the public address used in SNAT
> rule ?
> > For this rule:
> >
> > iptables -t nat -A POSTROUTING -s 172.21.0.0/16 -j SNAT --to
> 200.110.2.181
> >
> > For that rule, its necessay set up phisically the IP 200.110.2.181
> over the
> > interface ?
> 
> No, it is not necessary to set up that address on that interface in
> order to 
> use that rule and send out packets with that source address.
> 
> However, if you send out packets with that source address, and you want
> to 
> receive the replies, the address must exist on whatever machine the
> address 
> will get routed to.
> 
> If you are only doing UDP transmits, and never expect a reply, it might
> work.
> 
> Regards,
> 
> Antony.
> 
> -- 
> "The joy of X!!??  I've always hated compiling graphical shite.  You
> have a 10 
> line program, and it ends up depending on the entire known universe."
> 
>  - Philip Hands
> 
>                                                      Please reply to the
> list;
>                                                            please don't
> CC me.
> 
> 
> 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux