-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi List,
>> iptables -t nat -A POSTROUTING -s x.x.x.16/32 -j SNAT --to-source y.y.y.y >> >> which packets do you expect it to match? > > Everything with a source address of the vserver. That rule is not the > exact rule that I was using, but it is the simplest example of a rule > that doesn't work as expected. I have now tested this with a stock kernel using the same config as the vserver patched kernel and the iptables rules match the packets as expected. This leads me to believe it's specific to the vserver patched kernel. Either over the weekend or early next week I'll build a lab to test this more thoroughly. Regards Darryl -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQFBt9Vg/XQ6DbmPjokRAnm4AJ9TGG5b8BsJoZPctG9bgMrAyfcdbgCeMEjV YO4BusjzVw68u5jPvyu5N7w= =HNRG -----END PGP SIGNATURE----- _______________________________________________ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
