Hello Jorge ! Thanks for the response. When i have a fixed ip i can use SNAT, but i have some dsl links with dynamic ip so i can't use SNAT :-( Leandro ------- Leandro: You need another rule to alter the source ip address of the outgoing packets. iptables -t nat -A POSTROUTING -o eth0 \ -j SNAT --to-source <server_address> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE Jorge. El vie, 10-03-2006 a las 12:01 -0300, Leandro Silva escribió: > I have the following rule in my firewall: > iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE And that's the > only rule if postrouting chain. It's working fine but from time to > time a packet leaves the server with the original ip and not with the > server's. It's happening like 1 "wrong" packet for 100 or 200 ok. > I've tried in other servers with same results and different > "Mandrakes" ( 9.1, 10,1 and 2006.0 ). And different cpus ( p3, p4, > amd, all with 512 mb ram ). > Any ideias ? > > Thanks a lot > Leandro > -- Jorge Isaac Davila Lopez Nicaragua Open Source +505 808 2478 davila@xxxxxxxxxxxxxxxxxxxxxxx
