Kapetanakis Giannis a écrit : > > What I'm worried of is than a random connection could be created which uses > the mapping of port 8080 of 192.168.1.1 and then the internal server > would not be available. > But I guess this is not a problem since a connection has 4 parameters > src/dst ip/port. Indeed, if some random outgoing connection to a remote host is mapped on source port 8080 it is very unlikely to disrupt access to the internal server, and it would only affect access from that remote host during a short delay after the connection has been terminated (until the mapping is deleted). -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html