Re: Logging NAT Translations

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Jun 6 2007 00:15, Craig Bernstein wrote:
>
> On 6/5/07, Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx> wrote:
>> iptables -t nat -N ydm1
>> iptables -t nat -A ydm1 -j LOG "[Adress got SNATed to 134.76.13.21] "
>> iptables -t nat -A ydm1 -j SNAT --to 134.76.13.21
>> 
>> iptables -t nat -A POSTROUTING <-d condition -m condition or whatever> -j
>> ydm1
>> 
>> It already was a complete example. When you SNAT, you know you do.
>
> --to-source can be (and is, in this case) a range of IP addresses.  I
> know I SNATed, but not to which source IP address and port.

Oh I did not know :-/ I rarely need ranges, mostly because it does not RR over
them like I thought it does :(


	Jan
-- 


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux