Tobias Andresen a écrit : > Am 06.03.2016 um 22:40 schrieb Pascal Hambourg: >> >>> iptables -t nat -A POSTROUTING -p udp --dport 123 -j MASQUERADE >> >> Why is this rule needed ? What's between 10.0.0.95 and 62.214.6.29 ? > > This is the internet connection. But I suppose it is not a simple wire. 10.0.0.95 is a private address and 62.214.6.29 is a public IP address, so there must be some sort of NAT router between them. Am I correct ? > I cannot achieve this by using iptables or why would you prefer plain > routing? Because the action of carrying packets from the source to the destination is done by routing. > I thought i have to use iptables because the ntp server (62.214.6.29) > does not know who is behind 10.0.0.95 > and the embedded device has to change the source and destination address... Why ? IIUC 62.214.6.29 is a public address on the internet and 10.0.0.95 is a private address on your LAN, so the NTP server does not know about 10.0.0.95 either. The job of changing private addresses must be performed by some other device connected to the same network as eth0. Only that device needs to know about your private addresses. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
