exclude NAT to multiple networks

Matthew TenHulzen mlt@willconsult.com
Fri, 15 Nov 2002 17:20:54 -0600


I have the following NAT line that excludes NAT'ing to the 192.168.250.0/24
network.

$IPTABLES -t nat -A POSTROUTING -o $INET_IFACE -d ! 192.168.250.0/24 -j
SNAT --to-source $INET_IP

I need to exclude NAT for additional networks, but cannot figure out how to
do it.  I have tried duplicating this line, but it doesn't work.  I also
cannot figure out how to specify multiple subnets in the same line.


Does anyone know how to exclude traffic to multiple subnets from being
NAT'ed??

Matt