Torsten,
I suffered a similar problem and was wondering if you found a better solution to the problem of dnatting on a transparent bridge.
My setup: INTERNET <-> ROUTER <-> (linux)BRIDGE <-> INTERNAL NETWORK
Solution: setup a bridge with ip x.x.x.51 and alias another ip to the bridge x.x.x.50 ( using a /16 network at home ) Now get the router to send all incomming traffic to .50
DNAT traffic you want on your bridge to .51 and other traffic to say .101 Now it works .. very strange, hey works here.
<-------------------- rules ------------------------------>
iptables -t nat -N toZeus
iptables -t nat -I toZeus -m physdev --physdev-in eth1 \
-s ! x.x.0.0/16 -j DNAT --to x.x.x.51
iptables -t nat -N toHerc
iptables -t nat -I toHerc -m physdev --physdev-in eth1 \
-s ! x.x.0.0/16 -j DNAT --to x.x.x.101
iptables -t nat -I PREROUTING -p tcp -m multiport \
-d x.x.x.50 --destination-ports \ ftp,sftp,ssh,smtp,ssmtp,http,pop3,pop3s,imap,imaps \
-j toZeus
iptables -t nat -I PREROUTING -p udp -m multiport \
-d x.x.x.50 --destination-ports 41111 -j toHerc
iptables -t nat -I PREROUTING -p tcp -m multiport \
-d x.x.x.50 --destination-ports 41111 -j toHerc
<-------------------- end rules --------------------------->
I just joined this list sorry, if I missed the solution.
Michiel Brandenburg
_______________________________________________ Bridge mailing list [EMAIL PROTECTED] http://lists.osdl.org/mailman/listinfo/bridge
