[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Can't DNAT with iptables

To: luci-discuss@luci.org
Subject: Re: Can't DNAT with iptables
From: Danny Sauer <cloudmaster@cloudmaster.com>
Date: Tue, 04 Mar 2003 12:14:38 -0600
In-Reply-To: <20030304160610.GA21007@osiris.silug.org>
Organization: Linux Users of Central Illinois
References: <1046729072.1815.76.camel@lnx2k> <3E64BFC8.8030704@cloudmaster.com> <20030304160610.GA21007@osiris.silug.org>
Reply-To: luci-discuss@luci.org
Sender: luci-discuss-owner@luci.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3b) Gecko/20030210

Steven Pritchard wrote:
> On Tue, Mar 04, 2003 at 09:01:28AM -0600, Danny Sauer wrote:
> 
>>If INPUT and FORWARD are both set to default DROP, then they're probably 
>>being dropped at the INPUT table before they even get to the FORWARD 
>>table...
> 
> 
> Unlike ipchains, packets coming in to iptables go to *either* the
> INPUT or the FORWARD chain, not both.

So it does...
http://www.netfilter.org/documentation/HOWTO//netfilter-hacking-HOWTO-3.html#ss3.2

Huh.

--Danny, reading the documentation *before* posting next time

-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.

References:
- Can't DNAT with iptables
  - From: Dan Fleischer <dan.fleischer@bank-and-trust.com>
- Re: Can't DNAT with iptables
  - From: Danny Sauer <cloudmaster@cloudmaster.com>
- Re: Can't DNAT with iptables
  - From: Steven Pritchard <steve@silug.org>

Prev by Date: Re: Can't DNAT with iptables
Next by Date: Cyrix processors for sale?
Prev by thread: Re: Can't DNAT with iptables
Next by thread: Re: Can't DNAT with iptables
Index(es):
- Date
- Thread