DNAT/SNAT question

Gary W. Smith gary at primeexalia.com
Fri Apr 15 01:28:00 CEST 2005


I cleared and reloaded everything and it's now returning an Invalid
argument error.  

Fine:
iptables -t nat -A PREROUTING -d 88.44.55.8/29 -j NETMAP --to
10.20.30.8/29
iptables -t nat -A POSTROUTING -s 10.20.30.8/29  -j NETMAP --to
88.44.55.8/29

Error:
iptables -t nat -A OUTPUT -d 88.44.55.8/26  -j NETMAP --to 10.20.30.8/29
iptables: Invalid argument

Almost there.

-----Original Message-----
From: netfilter-bounces at lists.netfilter.org
[mailto:netfilter-bounces at lists.netfilter.org] On Behalf Of Jason
Opperisano
Sent: Thursday, April 14, 2005 4:17 PM
To: netfilter at lists.netfilter.org
Subject: Re: DNAT/SNAT question

On Thu, Apr 14, 2005 at 04:08:08PM -0700, Gary W. Smith wrote:
> I'm almost there.  I get an error when trying to use NETMAP in the
> OUTPUT chain.  Is there something else I need to add?
> 
> iptables -t nat -A OUTPUT -d 88.44.55.8/26  -j NETMAP --to
10.20.30.8/26
> iptables v1.2.11: Bad network address `10.20.30.8/26'

'nother typo:  the network address for 10.20.30.8/26 is 10.20.30.0 not
.8.  i thought we agreed on 10.20.30.8/29?

-j

--
"Lois: $49.95? Are you sure we can afford this?
 Peter: Lois, our relationship can not be measured in nipples and
 dimes... nickels and boobs... money."
        --Family Guy




More information about the netfilter mailing list