Curious behavior of iptables and masquerading

[Mark Phillips <mark@ist.flinders.edu.au>]

I noticed that if I run:

iptables -t nat -P POSTROUTING DROP
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j ACCEPT

then masquerading works, but if I run the last two commands in the
opposite order (so that they appear in the opposite order on the chain
list) then masquerading doesn't work.

Can anyone explain to me why?  I wouldn't have thought it would make any
difference.

Cheers,

Mark.



_/~~~~~~~~___/~~~~~~____________________________________________________
____/~~_____/~~__/~~__________________________Mark_Phillips____________
____/~~_____/~~________________________________mark@ist.flinders.edu.au_
____/~~\HE___/~~__/~~\APTAIN_____________________________________________
____/~~______/~~~~~~____________________________________________________
__________________________________________________________________________
        "They told me I was gullible ... and I believed them!"