Mailinglist Archive: opensuse-security (394 mails)

< Previous Next >
RE: [suse-security] Another NAT Question

-----Original Message-----
From: BLeonhardt@xxxxxxxxxxx [mailto:BLeonhardt@xxxxxxxxxxx]
Sent: 10 December 2003 14:35
To: suse-sec
Subject: [suse-security] Another NAT Question

HI all,

I'm not sure about the PREROUTING chain ..

if I say :

iptables -t nat -A PREROUTING -i eth1 -o eth0 -p tcp --dport 80 -j DNAT

is the real source address present or the source address from the router


Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here

Before pre-routing - the real source address
After pre-routing when the packet hits the FORWARD chain - the source ip
of the router.

< Previous Next >
This Thread
  • No further messages