Re: Why MASQUERADE --to-ports ?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi there,

On Fri, 30 Aug 2019, toml@xxxxxxx wrote:

I have an understanding problem with the following 3 rules
generated by virtmanager (libvirt). Why are the first two
rules necessary when the third rule handles the whole VM?
What is the advantage of the first two rules?

Does anyone have a short explanation for me?
...
-A POSTROUTING -s 192.168.100.0/24 ! -d 192.168.100.0/24 -p tcp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.100.0/24 ! -d 192.168.100.0/24 -p udp -j MASQUERADE --to-ports 1024-65535
-A POSTROUTING -s 192.168.100.0/24 ! -d 192.168.100.0/24 -j MASQUERADE

If I did something like that, it would be because I wanted separate
counters for each rule - to see a little more of what's going on.

--

73,
Ged.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux