-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 10/31/2016 01:37 PM, Steven Jan Springl wrote: > Tom > > The snat rule in the attached config. generates the following > iptables rule: > > -A SHOREWALL -o br0 -p 6 -s 10.11.11.0/11 ! -d 1.1.1.1 -m > multiport --dports 110,1,2,34,5,6,0:2,65000:65535,200:210 -j SNAT > --to-source 10.1.1.1-10.1.1.4 --to-source 10.2.1.1 --to-source > 10.3.1.1-10.3.1.255:500-600 --persistent --random -m comment > --comment "masq." > > Which produces the following iptables-restore error message: > > iptables-restore v1.4.21: SNAT: Multiple --to-source not supported >
This also happens with the equivalent rule in the masq file, does it not? - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYF7rJAAoJEJbms/JCOk0QL08P/1U9U2len9fG2KbregULdOU8 77NALtUDrIlohMMBwquzqFfoyvxlbP7iE2MlI7o997nRquLcWwNoVDKYd4Jq7g3I duk0Ox7JHFwL3q+aGDj3WlSpSJM1ESQGlfmsAE4xAQ3rWyM2e8zXz9kgKHzepvla WuiW9NpW05SFUcfslgLzcJDwMTp2dpwhqCbKMfHfw6GS/gmsw7vB9JBtUXGzYmGD 5JOUIpePwwv+gLAWnPz9e5GI6MPWOd7a/fbv68IN8g3I3wK9OKqLGsKvLfVGOfgW Klq1hfJmjQBk85pc1M2x9+VJJcVGZCpR3/QvsU7tmPXKSE5OWP9VN78WV/i3PsW0 tmFXIYIgTUQVBGsbkFh9kyk5IH20Km8ux8xFBrL+MGLlsnS70l0QAaOHZ2F5XXck JyEukkNcVNWzEkDOZMPDdLbmp1UncAcMDCUUXjiKmZaQpmGt0DKGoWsN7vVL/k/Q TRkTfjr3wPGD3HyzJzim5M07proPWosugGqijWfpYemoJpx1ELIPNUE5Qkr/50VR LvyEbp9aNZZzdt+2R06bzup+4W4mEEJj3DkL1hUCY/EY9oDE2/AB2tkXPCxMeMQG 4kxWvAwsk86uJEzP/lVMAjZcq5uLaOjqPV4eIXIOQj+DWwB2cXGi926qbAxL1/Kr IhedEvpNJtRbbCzQcaVW =69aF -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today. http://sdm.link/xeonphi _______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
