iptables OUTPUT SNAT

[Miroslav Petricek]

On Mon, Jan 28, 2002 at 12:09:16PM +0100, Ladislav Kaderják wrote:
> je mozne robit SNAT pre OUTPUT chain ?
> 
> mam totiz problem s ktorym si neviem rady
> 
> root# iptables -A OUTPUT -t nat -d 192.168.1.1  -j SNAT --to-source=192.168.1.11
> iptables: Invalid argument
>           ^^^^^^^^^^^^^^^^ postrouting ide output nie
> 

SNAT se provadi pouze v POSTROUTINGu. Retezec OUPUT je urcen pouze
pro DNAT a jeste s poznamkou, ze to zatim jeste neni prilis spolehlive.

Pokud skutecne potrebujete neco podobneho, napiste si to do
POSTROUTINGu a pridejte si tam nejake pridavne pravidlo (-i, -s),
kterym to omezite jen na OUTPUT pakety.

-- 
/*     Miroslav Petricek           mirek na petricek.cz
       Brno, Czech Rep.            ICQ: 56183467
---- http://www.petricek.cz/ --------------------------
    It's entirely untested, but it looks good and
        compiles. Ship it!            - Linus Torvalds               */