Re: DNAT: forwarding all ports to a host

Pascal Hambourg wrote at 2010-07-15 16:10 -0500:
> green a écrit :
> > # iptables -t nat -A PREROUTING -i eth0 -j DNAT --to-destination 192.168.2.10
> >
> > But what affect does this have on ESTABLISHED,RELATED connections?
>
> Absolutely none.
>
> > Does this
> > interfere with, say, a reply from google.com:80 to network host 192.168.2.99?
>
> No. Only the first packet of a new connection (i.e. the first one in the
> state NEW) goes through the 'nat' rules. Existing connections are not
> affected by 'nat' rules.

Oh yes, I remember reading that now in some documentation somewhere. That
helps me understand better what I'm doing in the nat table. Thanks.