> not even...bill joy?
Hum...
> remember the part where i said, "make sure the 2nd rule comes *before*
> any outbound SNAT/MASQ rule that is less specific"...i do--man, those
> were good times.
> anyways, since you match all 192.168.0.0/16 traffic with the MASQ rule,
> the SNAT rule for 192.168.254.3 will never be matched.
>
> translation: put the dang SNAT rule for the mail server first.
>
Ah - thanks - I am SURE I tried that.....
Anyway this now works with:
$IPTABLES -t nat -A POSTROUTING -o ${INET_IFACE} -s $DMZ_MAIL_IP -p
tcp --dport 25 -j SNAT --to-source $MAIL_INET_ALIAS
Many, many, many thanks.
Greg
> -j
>
> --
> "Lois: I'll be just like Hillary Clinton, only you know, without the
> penis."
> --Family Guy
>
>
