John Clarke wrote:
I should have also said that if the dual-homed host has a static address on eth1 then you should use SNAT instead of MASQUERADE:iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth1 -j SNAT \ --to-source 10.0.0.1
Something that I've always wondered about, but never taken the time to investigate: why is SNAT preferable to MASQUERADE?
-- Pete -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
