About this list Date view Thread view Subject view Author view Attachment view

From: Darryl Ross (spam_at_afoyi.com)
Date: Thu 09 Dec 2004 - 04:32:32 GMT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi List,

>> iptables -t nat -A POSTROUTING -s x.x.x.16/32 -j SNAT --to-source y.y.y.y
>>
>> which packets do you expect it to match?
>
> Everything with a source address of the vserver. That rule is not the
> exact rule that I was using, but it is the simplest example of a rule
> that doesn't work as expected.

I have now tested this with a stock kernel using the same config as the
vserver patched kernel and the iptables rules match the packets as
expected. This leads me to believe it's specific to the vserver patched
kernel.

Either over the weekend or early next week I'll build a lab to test this
more thoroughly.

Regards
Darryl

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBt9Vg/XQ6DbmPjokRAnm4AJ9TGG5b8BsJoZPctG9bgMrAyfcdbgCeMEjV
YO4BusjzVw68u5jPvyu5N7w=
=HNRG
-----END PGP SIGNATURE-----

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 09 Dec 2004 - 04:32:44 GMT by hypermail 2.1.3