if u nslookup www.facebook.com,you can get different resolved ip almost every time. Many webs use this kind of wrr dns reply method. It means I need to find out all of the resolved ip manually and then add rules for all of the resolved ips... 2011/4/22 Jan Engelhardt <jengelh@xxxxxxxxxx>: > > On Friday 2011-04-22 09:19, Lu Brian wrote: >> >>when i type the command : >>[root@localhost ~]# iptables -t nat -A POSTROUTING -s 192.168.3.0/24 >>-d www.facebook.com -j SNAT --to-source 192.168.3.254 >> >>I can only get 1 new rule for the domain www.facebook.com > > And why is that a problem? facebook.com resolves to only one address. > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
