?
Solved

iptables

Posted on 2009-07-08
2
Medium Priority
?
267 Views
Last Modified: 2012-05-07
Hi,

I have some rules as below:
-A POSTROUTING -s 192.168.4.14 -p udp -m udp --dport 9112 -j SNAT --to-source 202.52.225.9
and
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERADE

I will highly appreciate if someone can help me understand it.  I am not getting where this POSTROUTING chain does..
0
Comment
Question by:its_ns_04
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 1

Expert Comment

by:dontdig
ID: 24803970
this is example of NAT first one belongs to Source Nat and second is for jump target MASQUERADE which is used for sharing internet from an public ip to local lan

though i dont know much about NAT hopefully some other will assist u better soon :-)
0
 
LVL 27

Accepted Solution

by:
Nopius earned 1000 total points
ID: 24813923
OK.
> -A POSTROUTING -s 192.168.4.14 -p udp -m udp --dport 9112 -j SNAT --to-source 202.52.225.9

This rule allows LAN station 4.14 to access UDP destination port 9112 on any Internet host and it will be visible a 202.x.x.0, not as 192.x.x.14

> -A POSTROUTING -s 192.168.1.0/255.255.255.0 -j MASQUERAD

This rule probably provides internet access to all LAN users from 1.0 network.

0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

rdate is a Linux command and the network time protocol for immediate date and time setup from another machine. The clocks are synchronized by entering rdate with the -s switch (command without switch just checks the time but does not set anything). …
If you have a server on collocation with the super-fast CPU, that doesn't mean that you get it running at full power. Here is a preamble. When doing inventory of Linux servers, that I'm administering, I've found that some of them are running on l…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
Suggested Courses
Course of the Month8 days, 2 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question