Modify packet without NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have a simple nat configuration to forward certain access to a gateway:

iptables -t nat -A PREROUTING -p tcp -m set --match-set http_port dst,dst -j DNAT --to-destination XXX:80
iptables -t nat -A POSTROUTING -j MASQUERADE

Can I do that without nat? Just trying to avoid the "conntrack table full" issue.
Is there a non-stateful solution?





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux