Re: netstat / masquerading

[Jeff <jcoppock1@attbi.com>]

David Fokkema, 2003-Apr-03 16:08 +0200:
> Hi group,
> 
> I was used to display masqueraded connections with
> 
> netstat -M
> 
> but now, under Woody, I get
> 
> no support for 'ip_masquerade' on this system.
> 
> I set up masquerading with
> 
> iptables -t nat -A POSTROUTING -o $BADIF -j MASQUERADE
> 
> What do I have to do to see the masqueraded connections?

Try this:

root # iptables -t nat -v -L -n

Chain PREROUTING (policy ACCEPT 153K packets, 48M bytes)
 pkts bytes target     prot opt in     out     source
 destination         

Chain POSTROUTING (policy ACCEPT 1522 packets, 91410 bytes)
 pkts bytes target     prot opt in     out     source
 destination         
 7475  433K MASQUERADE  all  --  *      eth0    0.0.0.0/0
 0.0.0.0/0          

Chain OUTPUT (policy ACCEPT 3919 packets, 241K bytes)
 pkts bytes target     prot opt in     out     source
 destination 

jc

-- 
Jeff Coppock		Systems Engineer
Diggin' Debian		Admin and User