Re: DNAT: forwarding all ports to a host

Pascal Hambourg wrote at 2010-07-15 16:10 -0500:
> green a écrit :
> > # iptables -t nat -A PREROUTING -i eth0 -j DNAT --to-destination 192.168.2.10
> > 
> > But what affect does this have on ESTABLISHED,RELATED connections?
> 
> Absolutely none.
> 
> > Does this 
> > interfere with, say, a reply from google.com:80 to network host 192.168.2.99?
> 
> No. Only the first packet of a new connection (i.e. the first one in the
> state NEW) goes through the 'nat' rules. Existing connections are not
> affected by 'nat' rules.

Oh yes, I remember reading that now in some documentation somewhere.  That 
helps me understand better what I'm doing in the nat table.  Thanks.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxAdT4ACgkQ682C+dBP+oQemACdHS5809CMZDiTP8iiAnKVOcTS
1AIAni2hKA6o0r5FTZFm3ijQx7cMgm6f
=kJsi
-----END PGP SIGNATURE-----