On Sun, Aug 21, 2011 at 06:42:13PM -0500, Troy Davis wrote:
> -A POSTROUTING -s 192.168.0.64/26 -o eth1 -m multiport -p udp --dport
> 53,123 -j MASQUERADE
> -A POSTROUTING -s 192.168.0.64/26 -o eth1 -m multiport -p tcp --dport
> 22,80,119,443 -j MASQUERADE

This config allows packets with private addresses to escape to eth1. Fix
it.

Bastian

-- 
She won' go Warp 7, Cap'n!  The batteries are dead!


-- 
To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110822122009.gb29...@wavehammer.waldi.eu.org

Reply via email to