Henrik Nordstrom zei: > But if you really want to do the port translation in userspace, then > packets in both directions MUST be sent to QUEUE in iptables and the > userspace would need to figure out what to do with the traffic. And you > also MUST make sure that ip_conntrack is not activated (loaded) on the > server. And you SHOULD translate all ICMP errors pertaining to this connection. M4
