On Monday 10 June 2002 12:35 pm, [EMAIL PROTECTED] wrote: > no no no :), they are not droped by router, I can see them on outgoing > interface and also on the next router. I really know what I am writing, > now I have log in PRE, FORW and POST chains only this is logged: > > Jun 10 13:18:58 r kernel: icmp SNAT PRE IN=eth3 OUT= > MAC=00:e0:7d:01:77:f6:00:50:da:4e:f4:a1:08:00 SRC=10.252.1.2 > DST=212.80.76.6 LEN=576 TOS=0x00 PREC=0xC0 TTL=255 ID=29618 PROTO=ICMP > TYPE=3 CODE=4 [SRC=212.80.76.6 DST=195.39.69.86 LEN=1500 TOS=0x00 > PREC=0x00 TTL=56 ID=28356 DF PROTO=TCP SPT=80 DPT=63776 WINDOW=32120 > RES=0x00 ACK PSH URGP=0 ] MTU=500
The source address of this packet is 10.252.1.2. The rule you had earlier was trying to match a source address of 192.168.0.0/16. Antony.
