# iptables -t nat -A POSTROUTING -s 192.168.0.0/25 -d ! 192.168.0.0/24 -o br1 -j MASQUERADE
The rule tells iptables to masquarade packets originating from 192.168.0.0/25 which destination isn't within 192.168.0.0/24 (my lab has two gateways for each /25 subnet, fyi).
It said:
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
The rule still worked just fine. But as a good guy, let's adhere to the current standard (which is assumed to be 'more correct' :D )
# iptables -t nat -A POSTROUTING -s 192.168.0.0/25 ! -d 192.168.0.0/24 -o br1 -j MASQUERADE
0 rants:
Post a Comment