[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Can't DNAT with iptables

To: luci-discuss@luci.org
Subject: Re: Can't DNAT with iptables
From: Steven Pritchard <steve@silug.org>
Date: Tue, 4 Mar 2003 10:06:10 -0600
In-Reply-To: <3E64BFC8.8030704@cloudmaster.com>
Mail-Followup-To: Steven Pritchard <steve@silug.org>, luci-discuss@luci.org
Organization: Linux Users of Central Illinois
References: <1046729072.1815.76.camel@lnx2k> <3E64BFC8.8030704@cloudmaster.com>
Reply-To: luci-discuss@luci.org
Sender: luci-discuss-owner@luci.org
User-Agent: Mutt/1.4i

On Tue, Mar 04, 2003 at 09:01:28AM -0600, Danny Sauer wrote:
> If INPUT and FORWARD are both set to default DROP, then they're probably 
> being dropped at the INPUT table before they even get to the FORWARD 
> table...

Unlike ipchains, packets coming in to iptables go to *either* the
INPUT or the FORWARD chain, not both.

Steve
-- 
steve@silug.org           | Southern Illinois Linux Users Group
(618)398-7360             | See web site for meeting details.
Steven Pritchard          | http://www.silug.org/

-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.

Follow-Ups:
- Re: Can't DNAT with iptables
  - From: Danny Sauer <cloudmaster@cloudmaster.com>

References:
- Can't DNAT with iptables
  - From: Dan Fleischer <dan.fleischer@bank-and-trust.com>
- Re: Can't DNAT with iptables
  - From: Danny Sauer <cloudmaster@cloudmaster.com>

Prev by Date: Re: Can't DNAT with iptables
Next by Date: Re: Can't DNAT with iptables
Prev by thread: Re: Can't DNAT with iptables
Next by thread: Re: Can't DNAT with iptables
Index(es):
- Date
- Thread