On Sun, Aug 21, 2011 at 06:42:13PM -0500, Troy Davis wrote: > -A POSTROUTING -s 192.168.0.64/26 -o eth1 -m multiport -p udp --dport > 53,123 -j MASQUERADE > -A POSTROUTING -s 192.168.0.64/26 -o eth1 -m multiport -p tcp --dport > 22,80,119,443 -j MASQUERADE
This config allows packets with private addresses to escape to eth1. Fix it. Bastian -- She won' go Warp 7, Cap'n! The batteries are dead! -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110822122009.gb29...@wavehammer.waldi.eu.org