My box is running a TCP service. When another box tries to my box, my box
responds with a reply packet.(Just like it should.)
How do I match that (and all subsequent) reply packets so I can SNAT on
them?
I even tried:
iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to 222.222.222.222
and sure enough, everything going out eth1 was 'from' 222.222.222.222 except
the reply packets to incoming connections.
Also tried -t nat OUTPUT, -t mangle OUTPUT, etc.. Nothing seemed to work.
Should I expect such a feat to be possible?
Thanks!
-Jesse
