Re: Firewall.routing configuration problems

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thursday 2005-October-20 11:40, Paul Lewis wrote:
> iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE -o
> eth3

Are you thinking that the "-o eth3" will modify the behaviour of the 
MASQUERADE target? It will not. It merely modifies which packets match 
the rule. The above matches packets with source address 192.168.0.0/24 
which are routed out device eth3.

See also SNAT, which is more appropriate with static IP addresses. 
MASQUERADE is for home users and dynamic IP addresses.

IIUC your issue, which I might not because I didn't spend much time on 
it, it's routing. You need to have routes for your conference guests. 
Furthermore as has been suggested here to me (and I concur) you should 
start unlearning route(8) and ifconfig(8) and start learning ip(8) from 
iproute2, which is far more powerful and capable.
-- 
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux