> Thanks for the information Harald. I take it you don't comment on how > ipchains/ipfwadm NAT does this? That knowledge would also be very much > appreciated as there are still (mostly) 2.2 -kernel boxes around.
I haven't commented on it, since I don't know too much about the ipfwadm/ipchains code. But from my point of view, they implement either 1 or 2 from your list. > Pekka Savola "Tell me of difficulties surmounted, -- Live long and prosper - Harald Welte / [EMAIL PROTECTED] http://www.gnumonks.org/ ============================================================================ GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+ V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)