
iptables man Pages D-17
querading is equivalent to specifying a mapping to the IP
address of the interface the packet is going out, but also
has the effect that connections are forgotten when the
interface goes down. This is the correct behavior when
the next dialup is unlikely to have the same interface
address (and hence any established connections are lost
anyway). It takes one option:
--to-ports <port>[-<port>]
This specifies a range of source ports to use,
overriding the default SNAT source port-selection
heuristics (see above). This is only valid with if
the rule also specifies -p tcp or -p udp).
REDIRECT
This target is only valid in the nat table, in the PRE
ROUTING and OUTPUT chains, and user-defined chains which
are only called from those chains. It alters the destina
tion IP address to send the packet to the machine itself
(locally-generated packets are mapped to the 127.0.0.1
address). It takes one option:
--to-ports <port>[-<port>]
This specifies a destination port or range or ports
to use: without this, the destination port is never
altered. This is only valid with if the rule also
specifies -p tcp or -p udp).
EXTRA EXTENSIONS
The following extensions are not included by default in
the standard distribution.
ttl
This module matches the time to live field in the IP
header.
--ttl ttl
Matches the given TTL value.
TTL
Komentáře k této Příručce