-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, i have a special situation. (INTERNET) ===== 210.210.210.210/eth0|firewall|10.0.0.1/eth1 ===== 10.0.0.2|server| I want to DNAT a port of my firewall on a server inside: $IPTABLES -t nat -A PREROUTING -i eth0 -d 210.210.210.210 -p tcp --dport 200 -j DNAT - --to-destination 10.0.0.2:200 but the server inside only accept packets from the IP of the inside interface of the firewall : 10.0.0.1 so i need that the source IP address of the packet sent by someone(x.x.x.x) on the internet change in 10.0.0.1. I try the SNAT, the MASQUERADE: $IPTABLES -t nat -A POSTROUTING -o eth1 -s x.x.x.x -p tcp --dport 20000 -j SNAT --to 10.0.0.1 or $IPTABLES -t nat -A POSTROUTING -o eth1 -s x.x.x.x -j MASQUERADE it don't work. Anyone know how to make this, DNAT and SNAT simultaneously. Thanks. - -- - -- Julien -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) iD8DBQFCbk2syavHQ2fnGwsRAugxAJ9uDT0Vnsai53XB0o7aMdghpz9ZEACeIkI+ rNvI7zZ8iaJcsNRnMCcjkvI= =jaWr -----END PGP SIGNATURE-----
