[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DNAT: forwarding all ports to a host



Hello,

green a écrit :
> 
> # iptables -t nat -A PREROUTING -i eth0 -j DNAT --to-destination 192.168.2.10
> 
> But what affect does this have on ESTABLISHED,RELATED connections?

Absolutely none.

> Does this 
> interfere with, say, a reply from google.com:80 to network host 192.168.2.99?

No. Only the first packet of a new connection (i.e. the first one in the
state NEW) goes through the 'nat' rules. Existing connections are not
affected by 'nat' rules.


Reply to: