MASQUERADE and ACCEPT targets

ratheesh k <ratheesh.ksz@xxxxxxxxx> · Wed, 24 Feb 2010 20:15:00 +0530

All ,

     R1)   iptables -t nat -I POSTROUTING -o eth0 -m state --state
ESTABLISHED,RELATED -j ACCEPT
     R2)   iptables -t nat -A POSTROUTING   -o eth0 -j MASQERADE

                                        machine "B"
                                     ------------------------------------------
                                     |                                        |
                                     |                                        |
machine "A"   ------> eth0 |
|eth1----------------------------------------> internet
                                     |                                        |
                                     |                                        |
                                     ------------------------------------------

 I applied rules R2 and i am able to browse internet from machine A .

 1. Is there any problem if i apply R1 ?
 2. if packet state become ESTABLISHED ( not a new packet ) , do we
need MASQERADE target for remaing packets ???

Thanks,
Ratheesh
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html