Tom

Rule:

SAME-  all  lan:192.168.0.3  tcp  80  -  84.45.199.1

produces iptables rules:

-A PREROUTING -i eth0 -j lan_dnat
-A OUTPUT -p tcp --dport 80 -d 84.45.199.1 -j SAME 192.168.0.3
-A lan_dnat -p tcp --dport 80 -d 84.45.199.1 -j SAME 192.168.0.3

which produces the error message:

iptables: SAME target: bad hook_mask 8


Changing 'all' to 'all-': 

SAME-  all-  lan:192.168.0.3  tcp  80  -  84.45.199.1

produces iptables rules:

-A PREROUTING -i eth0 -j lan_dnat
-A lan_dnat -p tcp --dport 80 -d 84.45.199.1 -j SAME 192.168.0.3

which does not produce any errors.

Steven.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to