> I discovered a case where SNAT'ing is necessary over the > MASQUERADE target. > > What I have found is when I use the MASQUERADE target, [B] sees > the traffic as if it came via IP 172.16.1.129. Hi everyone, Following up on my own post above ... I believe to get around the above issue, you can use the 'SRC' arg to 'ip route add': ip route add 172.16.4.0/24 src 172.16.4.2 dev eth0 protocol static Cheers! -pablo