Re: Implicit SNAT gone

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



  Hi,

2005-07-05, k keltezéssel 13.20-kor Jan Engelhardt ezt írta:
> >> In ip_nat_rule.c (and my syslog! apprently) I see:
> >> 
> >> /* Before 2.6.11 we did implicit source NAT if required. Warn about change. */
> >>                 printk("NAT: no longer support implicit source local NAT\n");
> >>                 printk("NAT: packet src %u.%u.%u.%u -> dst %u.%u.%u.%u\n",
> >>                        NIPQUAD(srcip), NIPQUAD(dstip));
> >> 
> >> So, how do I get the feature back with 2.6.12 logic?
> >> (Or do I have to forwardport that feature?)
> >
> >  Forward porting that "feature" is nearly impossible without backing
> >out all the NAT-related changes. However, you can usually solve the
> >problem itself instead of reintroducing such tricks. Why exactly do you
> >need this feature?
> 
> telnet 127.0.0.1 1234 should redirect to a different host. Previously, this 
> was possible using iptables -t nat -A OUTPUT -j DNAT -p tcp --dport 1234 
> --to-dest 192.168.17.2:1234

  OK, I see, but what's the point in redirecting a local connection? Why
can't you simply telnet to the real destination instead of doing such
tricks?

-- 
 Regards,
  Krisztian Kovacs




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux