On Tuesday 2008-04-15 20:10, Luke Elliott wrote: > > iptables -t nat -A PREROUTING -p tcp --dport 9002 -j REDIRECT --to-ports > 9003-9004 > > I'd like to balance connections to port 9002 across the two servers on ports > 9003 and 9004. Using the --random (or --random 1 with iptables 1.3.8...) option > works, but what should the non-random rule actually do? I'd rather use the two rules: 1. -m statistic --mode nth --every 2 -j REDIRECT --to-port 9003 + 2. (unconditional) -j REDIRECT --to-port 9004 Which will reliably RR over the ports. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html