В Птн, 05/06/2009 в 13:01 +0300, Rakotomandimby Mihamina пишет: > Hi, > On my gateway, I usually made a > -A INPUT ... -dport 80 ... -j REDIRECT 192.168.x.y:80 > In order to reach the webserver located on the LAN. > What would be the difference if I use a DNAT instead? > > What's the diferences between those? REDIRECT is like DNAT but for redirecting to a local machine only (INPUT chain), DNAT is more universal, can be used not only for redirecting to a local machine but also to a remote (PREROUTING chain). -- Покотиленко Костик <casper@xxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html