On Mon, Aug 09, 2004 at 11:55:10AM +0100, Antony Stone wrote: > > -A POSTROUTING -s 192.168.0.0/255.255.0.0 -o eth2 -j MASQUERADE > > -A POSTROUTING -s 10.0.0.0/255.0.0.0 -o eth2 -j MASQUERADE > > Yes (so long as eth2 is your external interace :) Yes. > DNAT in PREROUTING only works for packets being routed through the machine. > Squid is a local process sending packets out through OUTPUT, therefore you > need to DNAT in the OUTPUT nat table to let Squid connect to this address. Ok. I never knew that. Can you please give an small example on how to DNAT my scene in OUTPUT nat table ? Eagerly watiing for inputs on this. With warm regards, -Payal
