Re: IPTables vs. DNS (or : iptables doesn't change sourceport when MASQ'ing)

Article View: comp.os.linux.networking

Article #394

Back to comp.os.linux.networking Previous Next

#394

From: John Armstrong
Date: Mon, 06 Jan 2003 10:12

22 lines
2219 bytes

On Fri, 03 Jan 2003 17:06:20 GMT, nospam.koen.vdvelde@advalvas.be
(Koen Van de Velde) wrote:

>On Fri, 03 Jan 2003 16:32:23 +0000, John Armstrong
><ja@ggrove.swinternet.co.uk> wrote:
>

>>man iptables :
>> --to-ports port[-port]
>>  This  specifies  a  range of source ports to use, overriding the
>>  default SNAT source port-selection heuristics (see above).  This
>>  is only valid if the rule also specifies -p tcp or -p udp.
>I think this one is more used for redirection. eg: incomming packets
>on port 8000 on external interface of router should be redirected to
>other internal machine on port 80 (then the --to-ports 80 should be
>used). As described in 6.2.1 of the NAT-howto.

That would be the --to-ports option of the REDIRECT target, which
gives a range of destination ports, while the --to-ports option of
MASQUERADE gives a range of source ports.
-- 
John

Technical Details

Message-ID: <mgli1vspehv391afnbeb08gdlenta1ucq9@4ax.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!diablo.theplanet.net!zen.net.uk!lovejoy.zen.co.uk.POSTED!not-for-mail

References: <3e15b63e.2079245577@News.CIS.DFN.DE> <kceb1vkrt1c2c1hl5gmnadtsjtlq1mlmqu@4ax.com> <3e15c063.2081842881@News.CIS.DFN.DE>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 100a19,1167933813471c51
X-Google-Attributes: gid100a19,public
X-Google-Thread: 10669a,1167933813471c51
X-Google-Attributes: gid10669a,public
X-Google-Thread: 102510,1167933813471c51
X-Google-Attributes: gid102510,public
X-Google-ArrivalTime: 2003-01-06 02:12:16 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.icl.net!newsfeed.fjserv.net!diablo.theplanet.net!zen.net.uk!lovejoy.zen.co.uk.POSTED!not-for-mail
From: John Armstrong <ja@ggrove.swinternet.co.uk>
Newsgroups: comp.os.linux.networking,nl.comp.os.linux.netwerken,be.comp.os.linux
Subject: Re: IPTables vs. DNS (or : iptables doesn't change sourceport when MASQ'ing)
Date: Mon, 06 Jan 2003 10:12:13 +0000
Message-ID: <mgli1vspehv391afnbeb08gdlenta1ucq9@4ax.com>
References: <3e15b63e.2079245577@News.CIS.DFN.DE> <kceb1vkrt1c2c1hl5gmnadtsjtlq1mlmqu@4ax.com> <3e15c063.2081842881@News.CIS.DFN.DE>
X-Newsreader: Forte Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 22
Organization: Zen Internet
NNTP-Posting-Host: 212.23.14.155
X-Trace: 1041847933 lovejoy.zen.co.uk 29927 212.23.14.155
X-Complaints-To: abuse@zen.co.uk

Reply to Parent Message