On Mon, 2004-11-15 at 09:51, Jason Opperisano wrote: > On Mon, 2004-11-15 at 06:44, thomas.elsaesser@xxxxxxxxxxxxx wrote: > > Dear all, > > > > I need src nat before the packet go to the routing decision. > > How can i do it. > > > > Kind Regards > > > > Thomas > > well, SNAT is only valid in POSTROUTING of the NAT table. if you need > to apply alternate routing to a packet and translate it's source, you > can follow the theory of: > > 1) mark packet in PREROUTING of MANGLE > 2) route based on MARK > 3) SNAT packet in POSTROUTING of NAT <snip> It has been a long time since I worked with it so I don't remember the details but is the stateless NAT in iproute2 done before routing decisions? - John -- John A. Sullivan III Chief Technology Officer Nexus Management +1 207-985-7880 john.sullivan@xxxxxxxxxxxxx --- If you are interested in helping to develop a GPL enterprise class VPN/Firewall/Security device management console, please visit http://iscs.sourceforge.net
