On Monday 2011-01-17 12:57, GMail Isaac Gonzalez wrote: > >>>>NAT (be it for load balancing or other reasons) receives the >>>>return packets. >>> >>>Not strictly. You could utilize a second device whose CTs are >>>synchronized with the LB to apply the reverse transform, using >>>conntrackd. >> >>It also requires the loadbalancer to be using netfilter as well. > >It works with propietary methods. The real solution if do >symmetrical routing, all the replies must pass through the LB. I >can't use conntrackd because I can't install anything in the LB. Too bad. That heater statement from earlier does have value ;-) ("Did you know?..." That Linux also has a load balancer included.) -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html