From: Darryl Ross (spam_at_afoyi.com)
Date: Tue 07 Dec 2004 - 22:14:19 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Herbert Poetzl wrote:
| On Tue, Dec 07, 2004 at 07:40:45PM +1030, Darryl Ross wrote:
| iptables -t nat -A POSTROUTING -s x.x.x.16/32 -j SNAT --to-source y.y.y.y
|
|> which packets do you expect it to match?
Everything with a source address of the vserver. That rule is not the
exact rule that I was using, but it is the simplest example of a rule
that doesn't work as expected.
| Has anyone come across this before?
|
|> no, any tcpdump maybe?
Not in the office yet, but I will do one when I am. I don't know what
time it is where you are Herbert (where abouts are you?) but I can be in
the IRC channel in about an hour.
Regards
Darryl
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
iD8DBQFBtis7/XQ6DbmPjokRAuBbAJ9iUdQ5q0zpVIwcaUhTsXosBinQrgCcCwhU
tueX/p2j6+k4vbku2xFU2TU=
=jlRX
-----END PGP SIGNATURE-----
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver