Mailinglist Archive: opensuse-security (204 mails)
| < Previous | Next > |
Re[2]: [suse-security] SuSE firewall and Elster
- From: Christian Eisendle <nospam@xxxxxxxxxxxx>
- Date: Sun, 30 Jan 2005 11:27:16 +0100
- Message-id: <1775923400.20050130112716@xxxxxxxxxxxx>
>> > iptables -t nat -A POSTROUTING -o $EXT -p tcp \
>> > --dport 8000:8006 -j MASQUERADE
>> >
>> > Or, if you have a static IP address on $EXT interface, you'll be
>> > better off with
>> >
>> > iptables -t nat -A POSTROUTING -o $EXT -p tcp \
>> > --dport 8000:8006 -j SNAT --to-source <your static IP address>
>>
>> This does not work here. I always get
>>
>> iptables: No chain/target/match by that name
> Now I have found it: the second command does the trick! If you have an
> interface with a static IP it seems that you _must_ use this form.
"Must" is wrong! You can always use MASQUERADE - maybe the required
module is missing (ipt_MASQUERADE AFAIK)
> Thank you again!
> Jürgen
Christian
--
Christian Eisendle
mailto:nospam@xxxxxxxxxxxx
>> > --dport 8000:8006 -j MASQUERADE
>> >
>> > Or, if you have a static IP address on $EXT interface, you'll be
>> > better off with
>> >
>> > iptables -t nat -A POSTROUTING -o $EXT -p tcp \
>> > --dport 8000:8006 -j SNAT --to-source <your static IP address>
>>
>> This does not work here. I always get
>>
>> iptables: No chain/target/match by that name
> Now I have found it: the second command does the trick! If you have an
> interface with a static IP it seems that you _must_ use this form.
"Must" is wrong! You can always use MASQUERADE - maybe the required
module is missing (ipt_MASQUERADE AFAIK)
> Thank you again!
> Jürgen
Christian
--
Christian Eisendle
mailto:nospam@xxxxxxxxxxxx
| < Previous | Next > |