Vi$ta reported LAN connection "Local Only" [solved]

David A. Bandel david.bandel at gmail.com
Mon Dec 14 16:41:12 PST 2009


2009/12/14 Man-wai Chang <toylet at changmw.com>:
>>> (A) $IPT -t nat -A POSTROUTING -o $OUTIF -s $INTNET -j SNAT --to $OUTIP
>>> I can't use ppp+ as ppp0 is the ISP interface while ppp1 is for
>>> dialing-in via 56k modem.
>>
>> To specify which outgoing (-o) interface to use.  Otherwise, the SNAT
>> rule could match even internally routed traffic, and that could be a
>> problem, or as in the case of my router, have several incoming (local)
>> and multiple outgoing (downstream-connected) interfaces.  I must
>> specify which NAT rules apply to which interfaces and for what
>> traffic.
>
> I have -s in rule A and isn't it specifying the source?

yes, but that's only the first half.

>
> Option -o should not needed as there is a --to clause!

wrong again, unless of course you have a _very_ simple setup: 1
interface in, one interface out, one NAT'd network with no VLANs, etc.

>
> Could I use an interface in --to ?

Nope.  --to-source or --to-destination takes an IPv4 address only.
Perhaps MASQUERADE would suit your purposes better?

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
            - Nemesis Air Racing Team motto
Visit my blog at: http://www.pananix.com/cgi-bin/blosxom




More information about the Linux-users mailing list