On Thu, Apr 14, 2005 at 03:50:17PM -0700, Gary W. Smith wrote: > You caught another typo, it should have been .3-7. Also, the prefix > changes will also help. > > But I'm still concerned / confused about the OUTPUT chain. We currently > use the OUTPUT chain for the 1:1 nat. That seems to work fine on all > other configurations where we do nat'ing. > > Our rule is currently "[0:0] -A POSTROUTING -s 10.20.30.8 -j DNAT --to > 88.44.55.8" which works fine. But can we also consolidate this using > the NETMAP like the pre/post route? yes. -j -- "Peter: Hey, Brian. If cops are pigs, does that make you a Snausage? Brian: Clever, Peter. Did you stay up all night writing that? Peter: No, I got to bed around two, two-thirty." --Family Guy