[ale] iptables dnat

[James P. Kinney III]

On Fri, 2007-02-23 at 15:12 -0700, JK wrote:
> James P. Kinney III wrote:
> 
> > Does iptables dnat change the originating IP address? Is it supposed to?
> > 
> > Packet from 1.1.1.1 hits iptables destined to 10.10.10.10. That external
> > address is dnat'ed to 192.168.0.10 and then the packet is sent to the
> > the final address.
> > 
> > I have a system that seems to be changing the source IP of dnat packets
> > so that all connections appear to come from the iptables machine and not
> > the outside.
> 
> Is there also perhaps a MASQ rule on the outgoing interface?

Hmm. There is but the DMZ stuff has a corresponding snat rule before the
final snat for the blanket masq for the lan.
> 
> -- JK
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
-- 
James P. Kinney III          
CEO & Director of Engineering 
Local Net Solutions,LLC        
770-493-8244                    
http://www.localnetsolutions.com

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part