On Saturday 02 November 2002 14:00, Pekka Savola wrote: > > Does the patch below fix it? > > Yep, tcp resets seem to come fine without error messages now. Thanks. > > How about the source address of ICMP rejects, has this always been so > and/or is it easily modifiable?
Harald replied on the netfilter-devel mailing list that this is a feature. As these ICMP packets are seen by the POSTROUTING chain, you can just use SNAT there. Ofcourse, only if you know what source address to put it to ;) But that will probably be a router. -- cheers, Bart _______________________________________________ Bridge mailing list [EMAIL PROTECTED] http://www.math.leidenuniv.nl/mailman/listinfo/bridge
