Hello - I'm confused with syntax and NAT functionality.... Q1:
Host behind firewall ip=private_ip which opens tcp/21 connection to internet ip=ftp_server1. I need translate this connection : 1. change source IP to firewall's external (map tun0 10.0.0.0/16 -> firewall_ext_ip/32) 2. change destination IP to ftp_server2 - is it possible ? Q2: >From http://coombs.anu.edu.au/~avalon/ipfil-flow.html NAT: - output packets going through the NAT will have their source IP address changed, if a mapping rule and space in the table exists, prior to being forwarded. - input packets going through the NAT will have their destination IP address changed, if it can be found in the table, to the original value Does it mean that there are no other options ? How about changing destination IP if mapping rule exists ? Apparently its possible - there is "rdr" keyword. Just makes things not very clear. Thank you Sergei
