On Wed, Jul 31, 2002 at 10:06:20AM -0600, Ashley M. Kirchner wrote:
: 
:     The NAT part of my /etc/sysconfig/iptables file currently looks like this:
: 
: # Generated by iptables-save v1.2.5 on Sat Jul  6 21:48:37 2002
: *nat
: :PREROUTING ACCEPT [180:25435]
: :POSTROUTING ACCEPT [21:1455]
: :OUTPUT ACCEPT [21:1455]
: -A POSTROUTING -s 10.1.2.0/255.255.255.0 -d ! 10.1.2.0/255.255.255.0 \
:                -j SNAT --to-source xxx.xxx.xxx.xxx
: COMMIT
: # Completed on Sat Jul  6 21:48:37 2002

Why are you SNAT'ing a subnet?  Use masq instead..

-A POSTROUTING -o eth0 -j MASQUERADE

substitute your external i/f for eth0 

-- 
Jason Costomiris <><           |  Technologist, geek, human.
jcostom {at} jasons {dot} org  |  http://www.jasons.org/ 
          Quidquid latine dictum sit, altum viditur.
                    My account, My opinions.



-- 
redhat-list mailing list
Unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to