[ale] SNAT issues

[JK]

Chris Fowler wrote:
> On Wed, 2009-10-28 at 11:08 -0400, Jim Kinney wrote:
>> docs are correct. They are for DNAT not SNAT.
> 
> The last example on that page shows a SNAT rule.  Is that syntax wrong?


I think it is.  I tripped over this same issue a while back.  I believe some
older versions of iptables (et al) accepted --to-destination as a SNAT
option, but that has apparently changed.

-- JK


> Example 5.7:  Simulating full NAT with SNAT and DNAT
> [root at real-server]# iptables -t nat -A PREROUTING -d 205.254.211.17 -j
> DNAT --to-destination 192.168.100.17
> [root at real-server]# iptables -t nat -A POSTROUTING -s 192.168.100.17 -j SNAT --to-destination 205.254.211.17
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://mail.ale.org/mailman/listinfo/ale
> See JOBS, ANNOUNCE and SCHOOLS lists at
> http://mail.ale.org/mailman/listinfo
> 
>