[Firehol-support] 1.83 DNAT logging question
Allen K. Smith
allen at falconstudios.com
Tue Jan 28 19:25:01 GMT 2003
Hi,
Great tool. I have a question about 1.83.
The following rule:
dnat to 10.10.10.129 inface eth0 src 10.10.10.0/24 dport 25 log "SMTP
REDIRECT"
Creates these lines (from firehol debug):
/sbin/iptables -t nat -N nat.4 # L:43
/sbin/iptables -t nat -A PREROUTING -i eth0 -s 10.10.10.0/24 --dport 25
-j LOG --log-level warning --log-prefix=SMTP\ REDIRECT: # L:43
/sbin/iptables -t nat -A PREROUTING -i eth0 -s 10.10.10.0/24 --dport 25
-j nat.4 # L:43
/sbin/iptables -t nat -A nat.4 -j LOG --log-level warning
--log-prefix=SMTP\ REDIRECT: # L:43
/sbin/iptables -t nat -A nat.4 -j DNAT --to-destination 10.10.10.129 #
L:43
Should there be two -j LOG lines generated?
Thanks,
Allen
More information about the Firehol-support
mailing list