Hi, I am currently using the following rules on centos iptables to direct users from a --to-destination to different samba servers. What is the best approach to take to allow the users of 10.91.0.0 to also access Samba Server A? # Samba Server A /sbin/iptables -t nat -A PREROUTING -p udp --dport 137 -j DNAT --to-destination 192.168.1.10 --source 10.90.0.0/16 /sbin/iptables -t nat -A PREROUTING -p udp --dport 138 -j DNAT --to-destination 192.168.1.10 --source 10.90.0.0/16 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 139 -j DNAT --to-destination 192.168.1.10 --source 10.90.0.0/16 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 445 -j DNAT --to-destination 192.168.1.10 --source 10.90.0.0/16 # Samba Server B /sbin/iptables -t nat -A PREROUTING -p udp --dport 137 -j DNAT --to-destination 192.168.2.10 --source 10.91.0.0/16 /sbin/iptables -t nat -A PREROUTING -p udp --dport 138 -j DNAT --to-destination 192.168.2.10 --source 10.91.0.0/16 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 139 -j DNAT --to-destination 192.168.2.10 --source 10.91.0.0/16 /sbin/iptables -t nat -A PREROUTING -p tcp --dport 445 -j DNAT --to-destination 192.168.2.10 --source 10.91.0.0/16 Thanks, Chris -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
