> -----Original Message----- > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter- > bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Pascal Hambourg > Sent: Thursday, August 03, 2006 9:14 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: Re: DNAT with orignal source address > > > One question that I have regarding the recipe that you provided > > is that since I have machines with public addresses scattered through > > the 192.168.2.0/24 subnet would it still be matching more then it > > should? > > What do you mean ? > The question more specifically was: if I had a server at 192.168.2.10 would it also be caught by the 192.168.2.0/24 rule? But, I think you answered it with the answer to my last question. It would be caught by the more specific rule as long as it was placed before the general one. This would prevent traffic from/to the server from going through the general rule. Thanks for all the help, Robert LeBlanc
