On Fri, 2009-08-07 at 16:52 +0530, ratheesh k wrote: > Hi , > > I have a linux router with only one rule > > iptables -t nat -A POSTROUTING -i eth0 -o eth1 -j MASQUERADE > > > What i understood is (by googling net ) is that adding this will > give symmetric nat support to my router , is it true ???. Yes > 1. To have " full cone nat" support what should i do ?? Is it same > as DMZ configuration ?? > > 2 . restricted nat and port restricted nat cannot be implemented > using iptables ??? These are all technically inferior to symmetric NAT, and are AFAIK not provided by netfilter/iptables. I suggest you describe in detail(!) what you want to achieve to the list (possibly with ASCII diagrams) and then maybe people can help you out. > 3 . i installed windows STUC and tested . Test results show it is a > portrestricted nat ... But if i make default policy for wan INPUT and > wan PREROUING as REJECT , test got failed ??? is it iptables > dependend ?? > > Thanks, > atheesh -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html