From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on sa.int.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.2.3 Date: Wed, 7 May 2008 11:43:27 +0400 From: Timur Batyrshin To: sysadmins@lists.altlinux.org Message-ID: <20080507114327.6c5f07cb@batyrshin.ieml.ru> In-Reply-To: <200805062351.32233.vip0@seversk.ru> References: <48200ADA.2010801@rambler.ru> <4820360E.1070402@rambler.ru> <20080506152038.33741acc@batyrshin.ieml.ru> <200805062351.32233.vip0@seversk.ru> Organization: IEML X-Mailer: Claws Mail 2.10.0cvs158 (GTK+ 2.10.14; i586-alt-linux-gnu) Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-SpamTest-Version: SMTP-Filter Version 3.0.0 [0255], KAS30/Release X-SpamTest-Info: Not protected X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.10/RELEASE, bases: 07052008 #665340, status: clean Subject: Re: [Sysadmins] =?utf-8?b?0J/RgNCw0LLQuNC70LAg0L3QsCBpcHRhYmxlcyA=?= =?utf-8?b?0LTQu9GPINC30LDQstC+0YDQsNGH0LjQstCw0L3QuNGPIGh0dHAt0YLRgNCw?= =?utf-8?b?0YTQuNC60LAg0L3QsCDQv9GA0L7QutGB0Lg=?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.10b3 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 May 2008 07:43:29 -0000 Archived-At: List-Archive: On Tue, 6 May 2008 23:51:31 +0700 Vyatcheslav Perevalov wrote: > > > > ................... -- MASQUARADE. > > > > >=20 > > .......................................................................= .................. > > > > =D0=A7=D1=82=D0=BE-=D0=BD=D0=B8=D0=B1=D1=83=D0=B4=D1=8C =D0=BF=D0=BE=D0= =B4=D0=BE=D0=B1=D0=BD=D0=BE=D0=B5, =D0=B5=D1=81=D0=BB=D0=B8 =D0=BF=D0=BE = =D0=B0=D0=BD=D0=B0=D0=BB=D0=BE=D0=B3=D0=B8=D0=B8 =D1=81 =D0=BF=D1=80=D0=B0= =D0=B2=D0=B8=D0=BB=D0=BE=D0=BC =D0=B4=D0=BB=D1=8F MASQUARADE > > =D0=B4=D0=B5=D0=BB=D0=B0=D1=82=D1=8C: >=20 > =D0=AF =D0=BD=D0=B8=D1=87=D0=B5=D0=B3=D0=BE =D0=BD=D0=B5 =D0=BF=D1=83=D1= =82=D0=B0=D1=8E? =D1=80=D0=B0=D0=B7=D0=B2=D0=B5 =D0=BD=D0=B5 MASQU_E_RADE = (=D0=BF=D0=BE=D0=B4=D1=87=D1=91=D1=80=D0=BA=D0=BD=D1=83=D1=82=D0=BE =D0=BC= =D0=BD=D0=BE=D0=B9)? >=20 =D0=90=D0=B3=D0=B0, =D1=82=D0=BE=D1=87=D0=BD=D0=BE, =D0=BF=D1=80=D0=BE=D1= =89=D1=83 =D0=BF=D1=80=D0=BE=D1=89=D0=B5=D0=BD=D0=B8=D1=8F =D0=B7=D0=B0 =D0= =BD=D0=B5=D0=B2=D0=BD=D0=B8=D0=BC=D0=B0=D1=82=D0=B5=D0=BB=D1=8C=D0=BD=D0=BE= =D1=81=D1=82=D1=8C: MASQUERADE This target is only valid in the nat table, in the POSTROUTING chain. It should only be used with dynami- cally assigned IP (dialup) connections: if you have a static IP address, you should use the SNAT target. Masquerading is equivalent to specifying a mapping to the IP address of the interface the packet is going out, but also has the effect that connections are forgotten when the interface goes down. This is the correct behavior when the next dialup is unlikely to have the same interface address (and hence any estab- lished connections are lost anyway).