[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DNAT: forwarding all ports to a host



Pascal Hambourg wrote at 2010-07-15 16:10 -0500:
> green a écrit :
> > # iptables -t nat -A PREROUTING -i eth0 -j DNAT --to-destination 192.168.2.10
> > 
> > But what affect does this have on ESTABLISHED,RELATED connections?
> 
> Absolutely none.
> 
> > Does this 
> > interfere with, say, a reply from google.com:80 to network host 192.168.2.99?
> 
> No. Only the first packet of a new connection (i.e. the first one in the
> state NEW) goes through the 'nat' rules. Existing connections are not
> affected by 'nat' rules.

Oh yes, I remember reading that now in some documentation somewhere.  That 
helps me understand better what I'm doing in the nat table.  Thanks.

Attachment: signature.asc
Description: Digital signature


Reply to: