help with fast nat

Filip Sneppe filip.sneppe at
Thu Apr 14 09:42:26 CEST 2005

Hi Stephen,

On 4/13/05, Stephen Beck <becks at> wrote:

> can anyone get me on to the next step:

Unfortionately, "fast nat" is broken on 2.6 kernels, due to the ipsec code
that went in. It should actually be removed. Apparently, even RH 2.4 kernels 
with the ipsec code are broken:

See also:

And the thread at:

So I guess you're better off trying something like the NETMAP target
in iptables.


More information about the netfilter mailing list