On Feb 13 2007 15:44, R. DuFresne wrote: >> > > I may be wrong, but doing IP NAT on a bridge seems to me quite >> > > unnatural and >> > > troublesome. >> > >> > A bridge is like a 'direct connection' so you cannot use NAT. >> >> My idea of a bridge is a kind of software switch. >> Then why did you mention "setting up your proxy box as bridge" ? > > My understanding of a bridge, is that it is a transparent connector of two > distinct broadcast domains. ...making it one broadcast domain. > At least in their earlier and older first > implementations. > > Perhaps I'm showing my age?!... Everything is alright. Just see http://lists.netfilter.org/pipermail/netfilter/2007-February/068001.html Jan -- ft: http://freshmeat.net/p/chaostables/