Re: DNAT: forwarding all ports to a host
Pascal Hambourg <[email protected]>
| Newsgroups | gmane.linux.debian.devel.firewall |
|---|---|
| Organization | Plouf ! |
| Message-ID | <[email protected]> |
Hello, green a écrit : > > # iptables -t nat -A PREROUTING -i eth0 -j DNAT --to-destination 192.168.2.10 > > But what affect does this have on ESTABLISHED,RELATED connections? Absolutely none. > Does this > interfere with, say, a reply from google.com:80 to network host 192.168.2.99? No. Only the first packet of a new connection (i.e. the first one in the state NEW) goes through the 'nat' rules. Existing connections are not affected by 'nat' rules. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]