Stefan Friedel wrote:
Good Morning,
iptables on the server is v1.2.11, Debian sarge, 2.6.17.3
upgrade to iptables 1.3.6
Any hint? Did I miss some changes in the behavior of netfilter/iptables?
Man page (from iptables 1.3.6) states: In Kernels up to 2.6.10 you can add several --to-destination options. For those kernels, if you specify more than one destination address, either via an address range or multiple --to-destination options, a simple round-robin (one after another in cycle) load balancing takes place between these addresses. Later Kernels (>= 2.6.11-rc1) don't have the ability to NAT to multiple ranges anymore. Maybe the SAME target extension will help you.
