Re: IPTables vs. DNS (or : iptables doesn't change sourceport when MASQ'ing)

Article View: comp.os.linux.networking

Article #397

Back to comp.os.linux.networking Previous Next

#397

From: Jan Pieter
Date: Sat, 04 Jan 2003 14:59

14 lines
1980 bytes

Koen Van de Velde wrote:

> I thought it would give each outgoing packet a new unique source-port
> (let's say: starting from 61000). When the packets come back, it can
> check this port, look it up in it's NAT-table, and forward the packet
> to the original requester. As far as I know, this is how ipchains
> worked.
> Now it seems that iptables is doing it different, Or I did something
> wrong with my configuration, Or I'm using a buggy version of iptables.

Both ipchains and iptables only change the address, not ports - unless
you specifically configure them to do so.

Jan Pieter.

Technical Details

Message-ID: <3E16F6DC.4F127C87@athlon.jp.dhs.org>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!skynet.be!skynet.be!transit.news.xs4all.nl!newsfeed.xs4all.nl!xs4all!not-for-mail

References: <3e15b63e.2079245577@News.CIS.DFN.DE> <kceb1vkrt1c2c1hl5gmnadtsjtlq1mlmqu@4ax.com> <3e15c063.2081842881@News.CIS.DFN.DE>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 100a19,1167933813471c51
X-Google-Attributes: gid100a19,public
X-Google-Thread: 102510,1167933813471c51
X-Google-Attributes: gid102510,public
X-Google-Thread: 10669a,1167933813471c51
X-Google-Attributes: gid10669a,public
X-Google-ArrivalTime: 2003-01-04 08:01:36 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!skynet.be!skynet.be!transit.news.xs4all.nl!newsfeed.xs4all.nl!xs4all!not-for-mail
Message-ID: <3E16F6DC.4F127C87@athlon.jp.dhs.org>
Date: Sat, 04 Jan 2003 15:59:40 +0100
From: Jan Pieter <jp@athlon.jp.dhs.org>
Organization: Badly Configured Clients, Inc.
X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.4.20 i686)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.os.linux.networking,nl.comp.os.linux.netwerken,be.comp.os.linux
Subject: Re: IPTables vs. DNS (or : iptables doesn't change sourceport when 
 MASQ'ing)
References: <3e15b63e.2079245577@News.CIS.DFN.DE> <kceb1vkrt1c2c1hl5gmnadtsjtlq1mlmqu@4ax.com> <3e15c063.2081842881@News.CIS.DFN.DE>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 14
NNTP-Posting-Date: 04 Jan 2003 16:59:41 CET
NNTP-Posting-Host: 213.84.189.153
X-Trace: 1041695981 news.xs4all.nl 49117 213.84.189.153:32786
X-Complaints-To: abuse@xs4all.nl

Reply to Parent Message