🚀 go-pugleaf

On Mon, 06 Jan 2003 10:12:13 +0000, John Armstrong
<ja@ggrove.swinternet.co.uk> wrote:

>On Fri, 03 Jan 2003 17:06:20 GMT, nospam.koen.vdvelde@advalvas.be
>(Koen Van de Velde) wrote:
>
>>On Fri, 03 Jan 2003 16:32:23 +0000, John Armstrong
>><ja@ggrove.swinternet.co.uk> wrote:
>>
>
>>>man iptables :
>>> --to-ports port[-port]
>>>  This  specifies  a  range of source ports to use, overriding the
>>>  default SNAT source port-selection heuristics (see above).  This
>>>  is only valid if the rule also specifies -p tcp or -p udp.
>>I think this one is more used for redirection. eg: incomming packets
>>on port 8000 on external interface of router should be redirected to
>>other internal machine on port 80 (then the --to-ports 80 should be
>>used). As described in 6.2.1 of the NAT-howto.
>
>That would be the --to-ports option of the REDIRECT target, which
>gives a range of destination ports, while the --to-ports option of
>MASQUERADE gives a range of source ports.
>-- 
>John

Hi John,
I changed my masq-lines to  :
  /sbin/iptables -t nat -A POSTROUTING -s 192.168.102.13 -p udp \
    --sport 53 -o $EXTDEV -j MASQUERADE --to-port 61000:65095
  /sbin/iptables -A POSTROUTING -t nat -o $EXTDEV -j MASQUERADE    
and this works fine now !

thanks for your assistance,
Koen.