About this list Date view Thread view Subject view Author view Attachment view

From: Darryl Ross (spam_at_afoyi.com)
Date: Fri 17 Dec 2004 - 00:54:49 GMT


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>> Vincenzo, try adding a rule similar to the following:
>>
>> iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -o eth0 -j MASQUERADE
>
> won't work (actually that was what I wanted to say
> in the first place) because MASQUERADE is not what
> you want for locally originating connections, you
> actually want to use SNAT for that ...
>
> ... -j SNAT --to-source <public ip>

I think he said he has a dynamic IP address. Vincenzo, if you can use
SNAT, then that would be the better option, although you need to update
your firewall every time your IP address changes.

Regards
Darryl

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFBwi5Z/XQ6DbmPjokRAropAKCBCKaOln50pIH7N/TLxZFQ1X3iLgCfWW3o
haj3s4BwGrgaivi9se3qhfI=
=R7XN
-----END PGP SIGNATURE-----

_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 17 Dec 2004 - 00:55:34 GMT by hypermail 2.1.3