Re: iptables and NAT [SOLVED]

[Jorge Fábregas]

On 01/28/2011 01:11 AM, Jatin K wrote:
>  um  target     prot opt source               destination
>  2    DNAT       all  --  0.0.0.0/0            192.168.131.133  tcp dpt:80      
> to:192.168.131.131:80 
This line doesn't look right. Is it doing DNAT For the host
192.168.131.133 (converting it to 192.168.131.131?  This doesn't make
sense as 192.168.131.133 belongs to your internal network.


>  Chain POSTROUTING (policy ACCEPT)
>  num  target     prot opt source               destination
>  1    MASQUERADE  all  --  192.168.131.131/24        0.0.0.0/0 
192.168.131.131/24 is incorrect. If it's a particular host it should be
192.168.131.131/32 or simply 192.168.131.131.   If it's for the network
then it would be 192.168.131.0/24 (proper way to specify network).

And again, just like Tim mentioned,  you're not firewalling anything.
At this point you're just basically routing & NATing.

HTH,
Jorge