statistic module problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, i'm trying to use the statistic module to route different packets out on different ips using SNAT, however it only seems to match for the first N packets and then fails.

I've got the following rules set

iptables -t nat -A POSTROUTING -o eth1 -j LOG --log-prefix '***before***' --log-level debug iptables -t nat -A POSTROUTING -o eth1 -m statistic --mode nth --every 2 --packet 0 -j SNAT --to-source x.y.96.34 iptables -t nat -A POSTROUTING -o eth1 -m statistic --mode nth --every 2 --packet 1 -j SNAT --to-source x.y.96.35 iptables -t nat -A POSTROUTING -o eth1 -j LOG --log-prefix '***failed***' --log-level debug


if i try and ping on a route via eth1, the first 2 packets are SNATted ok but subsequent packets don't seem to be...

I'm guessing i've made a fundamental mistake wrt my understanding of the nat table or the stats module..

any ideas?

Thanks
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux