Re: Logging NAT Translations

["Craig Bernstein" <cbernstein@cbernstein.com>]

On 6/5/07, Jan Engelhardt <jengelh@linux01.gwdg.de> wrote:
> iptables -t nat -N ydm1
> iptables -t nat -A ydm1 -j LOG "[Adress got SNATed to 134.76.13.21] "
> iptables -t nat -A ydm1 -j SNAT --to 134.76.13.21
>
> iptables -t nat -A POSTROUTING <-d condition -m condition or whatever> -j ydm1
>
> It already was a complete example. When you SNAT, you know you do.
--to-source can be (and is, in this case) a range of IP addresses.  I
know I SNATed, but not to which source IP address and port.

--
...Craig