From: Darryl Ross (spam_at_afoyi.com)
Date: Thu 09 Dec 2004 - 04:32:32 GMT

• Previous message: Herbert Poetzl: "Re: [Vserver] Next Generation Networking ..."
• In reply to: Darryl Ross: "Re: [Vserver] vserver patches break iptables nat table?"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi List,

>> iptables -t nat -A POSTROUTING -s x.x.x.16/32 -j SNAT --to-source y.y.y.y
>>
>> which packets do you expect it to match?
>
> Everything with a source address of the vserver. That rule is not the
> exact rule that I was using, but it is the simplest example of a rule
> that doesn't work as expected.

I have now tested this with a stock kernel using the same config as the
vserver patched kernel and the iptables rules match the packets as
expected. This leads me to believe it's specific to the vserver patched
kernel.

Either over the weekend or early next week I'll build a lab to test this
more thoroughly.

Regards
Darryl

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBt9Vg/XQ6DbmPjokRAnm4AJ9TGG5b8BsJoZPctG9bgMrAyfcdbgCeMEjV
YO4BusjzVw68u5jPvyu5N7w=
=HNRG
-----END PGP SIGNATURE-----

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

• Previous message: Herbert Poetzl: "Re: [Vserver] Next Generation Networking ..."
• In reply to: Darryl Ross: "Re: [Vserver] vserver patches break iptables nat table?"