On 10/17/08 13:29, Jeremy Pullicino wrote:
Thanks Grant - I understand exactly what you mean.
*nod*
To solve the TCP Triangle problem I should probably add this rule
(192.168.11.1 is the local machine):
iptables –t nat –A POSTROUTING -p tcp --sport 80 –j SNAT –-to
192.168.11.1
Would that be correct?
I would not use an "sport" match. I would match on "dport". Remember
that client TCP connections can come from any port between 1024 and
65535. However seeing as how it is going to your proxy server on a
specific port I'd match on that. I'd probably also match on your proxy
server's destination IP.
Thanks for your advice.
You are welcome.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
