[Bug 554] Packet illegaly bypassing SNAT

[bugzilla-daemon at bugzilla.netfilter.org]

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554





------- Additional Comments From kaber at trash.net  2007-03-15 02:53 MET -------
Most likely these packets are considered invalid by connection tracking and
therefore not handled by NAT. Try this:

iptables -t mangle -A POSTROUTING -m state --state INVALID -j DROP

-- 
Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.