netfilter 0.90

[Rusty Russell]

In message <000001bf78bd$a3fafbf0$040a0a0a@internal> you write:
> I'm trying to do RNAT (DNAT) with the 0.90 version.  When I type the
> following command line iptables hangs.  I have to hit CTRL-C.  If I don't
> hit CTRL-C fairly soon, the system hangs.  Is this command line incorrect?
> Or is there some other problem.
> 
> iptables -t nat -A PREROUTING -p tcp -d 208.201.251.150 --dport 80 -t
> 10.10.10.7 --to-ports 80 -j DNAT
> 
> I also noticed that -t specifies the table and also specifies a 'to' address
> for NAT.

Hi Kevin!

No, `--to-dest' is for NAT now.  -t specifies the table.  This should
outright fail.

	VM: killing process emacs

Oh, it runs out of memory.  Bad, bad bad.  Damn that hurt!

You want:
iptables -t nat -A PREROUTING -p tcp -d 208.201.251.150 --dport 80
	-j DNAT --to-dest 10.10.10.7:80 

Rusty.
--
Hacking time.