However why would you want to do so ? It would hide the real source address from the SSH server on machine 2. Doesn't machine 2 use machine 1's private address as default gateway ?
Ah, I forgot to mention, machine 2 is on a private network that is not routed in any way. So, there is no default gateway for machine 2... That's why I was thinking the source port would have to be re-written internally such that machine 2 would know to send it back through machine 1 and then on to the internet... ? -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
