[ale] iptables dnat

Jim Popovitch jimpop at yahoo.com
Fri Feb 23 17:21:27 EST 2007


On Fri, 2007-02-23 at 16:53 -0500, James P. Kinney III wrote:
> Does iptables dnat change the originating IP address? Is it supposed to?
> 
> Packet from 1.1.1.1 hits iptables destined to 10.10.10.10. That external
> address is dnat'ed to 192.168.0.10 and then the packet is sent to the
> the final address.
> 
> I have a system that seems to be changing the source IP of dnat packets
> so that all connections appear to come from the iptables machine and not
> the outside.

That doesn't sound like it's setup right.  What are the iptables rules
you are using?

-Jim P.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part




More information about the Ale mailing list