From: Erik Smit (vserver_at_zoiah.net)
Date: Sat 10 Jan 2004 - 21:00:24 GMT
Ok, but outgoing connections cause traffic originating from high ports
already. This has nothing to do with the SNAT.
Regards,
Erik Smit
On Sat, Jan 10, 2004 at 07:50:12PM -0000, Lu?s Miguel Silva wrote:
> I use SNAT to let my vservers connect to the internet because otherwise the
> packets kept getting to the destination host with the vservers (internal)
> address :o)
>
> Best,
> +-------------------------------------------
> | Lu?s Miguel Silva
> | Network Administrator@ ISPGaya.pt
> | Rua Ant?nio Rodrigues da Rocha, 291/341
> | Sto. Ov?dio ? 4400-025 V. N. de Gaia
> | Portugal
> | T: +351 22 3745730/3/5 F: +351 22 3745738
> | G: +351 93 6371253 E: lms_at_ispgaya.pt
> | H: http://lms.ispgaya.pt/
> +-------------------------------------------
>
> -----Original Message-----
> From: vserver-admin_at_list.linux-vserver.org
> [mailto:vserver-admin_at_list.linux-vserver.org] On Behalf Of Erik Smit
> Sent: s?bado, 10 de Janeiro de 2004 19:37
> To: vserver_at_list.linux-vserver.org
> Subject: Re: [Vserver] High Port Pass through??
>
> On Sat, Jan 10, 2004 at 07:40:21PM -0000, Lu?s Miguel Silva wrote:
> > Isnt that because all the traffic which passes from the vservers to
> "another
> > network" is passing by a NAT "filter" on the root vserver (which uses a
> high
> > port for each connection it makes)?
>
> Unless you configured netfilter (iptables/ipchains/etc.) to do that, no.
> (afaik)
>
> Regards,
>
> Erik Smit
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
>
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver