Iptables SNAT for pkt generated by internal process
I think I could use these commands:
iptables -t mangle -A OUTPUT -p udp --dport 514 -j MARK --set-mark 13 iptables -t nat -A POSTROUTING -- mark 13 -SNAT x.x.x.x
I tried, but I had this problem on first command:
"Couldn't load match `MARK':/lib//iptables/libipt_MARK.so: cannot open shared object file: No such file or directory"
Are the commands above rigth and is it sufficient to copy libipt_MARK. so into :/lib//iptables/ directory to solve my problem?
Thanks a lot to Alexandru Dragoi
Bye Monia
----Messaggio originale----
Da: [email protected]
Data: 16/05/2006 13.00
A: "[email protected]"<[email protected]>
Cc: <[email protected]>
Ogg: Re: Iptables SNAT for pkt generated by internal process
Quoted 4 lines · [email protected] wrote:
I would like to use iptables to translate the source of IP datagrams generated inside a router for some particular applications (such as
syslog: protocol UDP, destination port 514). I thought to use an iptables rule defined by an OUTPUT chain (which let manipulate
datagram
Quoted 2 lines
generated from local process) and by the target SNAT (which let to translate ip source) -> iptables -t nat -A OUTPUT -p udp --dport 514 -
j
Quoted 1 line
SNAT --to x.x.x.x. The problem is that the OUTPUT chain cannot be
used
Quoted 11 lines
with the target SNAT!
Has anybody any idea about which is the best and simplest way to get the result described above?Thanks for Your collaboration.
Monia Cheli
Quoted 3 lines
Tiscali ADSL 4 Mega Flat
Naviga senza limiti a 19,95 Euro al mese con 4 Megabps di velocita'.
Attiva subito: hai 2 MESI di canone adsl GRATIS!
Quoted 2 lines
In piu', se sei raggiunto dalla rete Tiscali, telefoni senza pagare
il canone Telecom.
Quoted 8 lines
Scopri subito come risparmiare!
You do SNAT in POSTROUTING. Local generated packets also enter POSTROUTING. You may want to match source ip or .. you can mark packets
in mangle OUTPUT, and then SNAT in POSTROUTING matching only the mark value with mark match.
Tiscali ADSL 4 Mega Flat
Naviga senza limiti a 19,95 Euro al mese con 4 Megabps di velocita'. Attiva subito: hai 2 MESI di canone adsl GRATIS!
In piu', se sei raggiunto dalla rete Tiscali, telefoni senza pagare il canone Telecom.
Scopri subito come risparmiare!
Quoted 99 lines · [email protected] wrote:
I think I could use these commands:
iptables -t mangle -A OUTPUT -p udp --dport 514 -j MARK --set-mark 13 iptables -t nat -A POSTROUTING -- mark 13 -SNAT x.x.x.x
I tried, but I had this problem on first command:
"Couldn't load match `MARK':/lib//iptables/libipt_MARK.so: cannot open shared object file: No such file or directory"Are the commands above rigth and is it sufficient to copy
libipt_MARK. so into :/lib//iptables/ directory to solve my problem?Thanks a lot to Alexandru Dragoi
Bye Monia
----Messaggio originale----
Da: [email protected]
Data: 16/05/2006 13.00
A: "[email protected]"<[email protected]>
Cc: <[email protected]>
Ogg: Re: Iptables SNAT for pkt generated by internal processQuoted 6 lines · [email protected] wrote:
I would like to use iptables to translate the source of IP datagrams generated inside a router for some particular applications (such as
syslog: protocol UDP, destination port 514). I thought to use an iptables rule defined by an OUTPUT chain (which let manipulatedatagram
Quoted 4 lines
generated from local process) and by the target SNAT (which let to translate ip source) -> iptables -t nat -A OUTPUT -p udp --dport 514 -
j
Quoted 3 lines
SNAT --to x.x.x.x. The problem is that the OUTPUT chain cannot be
used
Quoted 11 lines
with the target SNAT!
Has anybody any idea about which is the best and simplest way to get the result described above?Thanks for Your collaboration.
Monia CheliQuoted 5 lines
Tiscali ADSL 4 Mega Flat
Naviga senza limiti a 19,95 Euro al mese con 4 Megabps di velocita'.
Attiva subito: hai 2 MESI di canone adsl GRATIS!
Quoted 3 lines
In piu', se sei raggiunto dalla rete Tiscali, telefoni senza pagare
il canone Telecom.
Quoted 9 lines
Scopri subito come risparmiare!
You do SNAT in POSTROUTING. Local generated packets also enter POSTROUTING. You may want to match source ip or .. you can mark packets
in mangle OUTPUT, and then SNAT in POSTROUTING matching only the mark value with mark match.Tiscali ADSL 4 Mega Flat
Quoted 11 lines
Naviga senza limiti a 19,95 Euro al mese con 4 Megabps di velocita'. Attiva subito: hai 2 MESI di canone adsl GRATIS!
In piu', se sei raggiunto dalla rete Tiscali, telefoni senza pagare il canone Telecom.
Scopri subito come risparmiare!
Try
iptables -t nat -A POSTROUTING -m mark --mark 13 -SNAT x.x.x.x