harmuth at mnemon.de
Thu Jul 21 14:09:40 CEST 2005
Jan Engelhardt schrieb:
>>>Suppose I masquerade ppp0 using
>>>iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
>>>And now all packets will have a src ip addr as 192.168.0.2 will be
>>>changed to that of ppp0 , for example say 10.10.10.1
> No, it does not say "changed to that of ppp0" but:
> _change_all_packets_that_go_out_of_ppp0_ (...to the address belonging to ppp0)
>>>Now my question is, when the reply comes, their destination addr will be
>>>that of ppp0 i.e 10.10.10.1
>>>Who will reverse translate this 10.10.10.1 destination addr to actual
>>This is the job of connection tracking, basically ipt_conntrack.
> Nitpick: ip_conntrack.
> ipt_conntrack is the module for the -m conntrack match used by iptables.
Oohps - my fault :) Thanks for correction.
Have a nice time,
More information about the netfilter