On 10/04/07 09:19, John Madden wrote:
I have a dozen or so other rules that do the same thing for different IP's (this is a load balancer).
Ah, ok.
Well I thought that's what I was doing with that SNAT rule. =)
No, with the SNAT rule you really are making the traffic appear as if it is from the NATing box its self. Here in lies your rub that you are trying to avoid.
Yeah, both machines have globally routable IP's.
Look for a more detailed discussion as a follow up to Pascal's post. Grant. . . . - To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
