From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=AWL,BAYES_00, RCVD_IN_SORBS_WEB,SPF_PASS autolearn=no version=3.2.5 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=8o3iD7IUtemB5JvuPmr2npmxoobmJwfZ0Hhy29IQ+4M=; b=B1a0huD33ILeUUDxiSdc9AVAtrml3zLAwSe0M7FiPa68ws1bYTbXjPx0NGlW18IUWd EA2SccBNdyZvzlVs69BtDmwkI1yCCLITUMxibBExyi+2L+G2n71UOsZGpsfXHXQxSr1C i3frhWnas5ORKq8HMo2pLvFRApdLexMWTabWo= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=Dsrh/zDD7wCUDbc4FGYmjVEGE/6T1AZCnUuNagtv8nCWB40NJOsEpNV1c6lvA9vjn1 Ddyq1iRkl51Ge33n4omJ+5iSIEA+3UJ7yHMFG2+xRQ13hmxacp5EM5fbphDlqrPcR20C XkIA3tfk1RXOo8AQwrdEyzwUmF38IBI4GpHhA= Message-ID: <49F0B159.6080306@gmail.com> Date: Thu, 23 Apr 2009 21:20:09 +0300 From: andriy User-Agent: Thunderbird 2.0.0.17 (X11/20080929) MIME-Version: 1.0 To: ALT Linux sysadmin discuss References: <49EFF907.1010808@gmail.com> <9d5146970904231011s3ef89a2bv45d147283b6568ec@mail.gmail.com> In-Reply-To: <9d5146970904231011s3ef89a2bv45d147283b6568ec@mail.gmail.com> Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [Sysadmins] NAT+squid X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2009 18:15:27 -0000 Archived-At: List-Archive: Afanasov Dmitry написав(ла): > 23.04.09, andriy написал(а): > >> iptables -t nat -A POSTROUTING -p all -o eth1 -j SNAT --to-source >> xxx.xxx.xxx.xxx:25 >> > что за нафиг - --to-source xxx.xxx.xxx.xxx:25? зачем порт источника > проставлять-то? причем для _всех_ исходящий в eth1 пакетов? включая > squid, кстати. > > Ошибку понял. А как правильно, чтоб ходил только 25 и 110?