Re: [SLE] Re: A Simple Question on iptables (NAT issue)

Thanks. But my question is how to unNAT a specific host under a situation of universal NAT, whihe the example you gave is to enable NAT. On 4/19/06, Jos van Kan wrote:

FW wrote:

...

The original NAT config that the admin set was:

iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

On 4/19/06, FW wrote:

...

Hi, all.

My situation is:

the gateway(Linux 2.4) imposes NAT on all the traffic from all workstations(configured with public IP addresses rathar than private ones) within the LAN.

Now I want to set an exception in the NAT rule. That's to say, I want the gateway not to do NAT on *one specific workstation* within the LAN. Could you HELP me on how to do that?

The iptables need a source parameter, like:

iptables -t nat -A POSTROUTING -s <IP address> -o ppp0 -j MASQUERADE

<IPADDRESS> could be a plain (local) address like 192.168.2.3, but also a subnet like 192.168.2.0/24

Regards, -- Jos van Kan registered Linux user #152704

-- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com