On Friday 2010-12-17 03:16, Robert Pipca wrote: > >Trying to setup a web proxy, I did: > >iptables -t nat -A PREROUTING -i br0 -p tcp --dport 80 -j REDIRECT >--to-port 1501 > >And "iptables -t nat -L -v " shows no packets seen by iptables. >Since "ebtables -t broute -L" shows me a empty BROUTING chain with >ACCEPT as the policy, everything is fine. If the above is fine to you, why would you even execute these two: >ebtables -t broute -A BROUTING -i eth1 -p ipv4 --ip-proto tcp >--ip-dport 80 -j redirect --redirect-target ACCEPT >ebtables -t broute -A BROUTING -i eth2 -p ipv4 --ip-proto tcp >--ip-sport 80 -j redirect --redirect-target ACCEPT > >"iptables -t nat -L -v" now sees HTTP traffic. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html