Ingo Oeser wrote: > Patrick McHardy schrieb: > >>Since these packets already have the proper source address chosen >>by routing, there is no need to NAT them anymore. So the easiest >>fix is to exclude them manually from masquerading based on the >>address. > > > Just did that (iptables -t nat -I POSTROUTING -s $SRCADDR -o ppp0 -j ACCEPT) > and it works without any problems. > > Many thanks for your very fast help! I'm very happy now :-) > > Do you know any good place, where this can be documented?
We have a netfilter Wiki now at wiki.netfilter.org. You could add the first entry :) - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html