|
Packit |
7b22a4 |
This target is only valid in the
|
|
Packit |
7b22a4 |
.B nat
|
|
Packit |
7b22a4 |
table, in the
|
|
Packit |
7b22a4 |
.B PREROUTING
|
|
Packit |
7b22a4 |
and
|
|
Packit |
7b22a4 |
.B OUTPUT
|
|
Packit |
7b22a4 |
chains, and user-defined chains which are only called from those
|
|
Packit |
7b22a4 |
chains. It specifies that the destination address of the packet
|
|
Packit |
7b22a4 |
should be modified (and all future packets in this connection will
|
|
Packit |
7b22a4 |
also be mangled), and rules should cease being examined. It takes the
|
|
Packit |
7b22a4 |
following options:
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-to\-destination\fP [\fIipaddr\fP[\fB\-\fP\fIipaddr\fP]][\fB:\fP\fIport\fP[\fB\-\fP\fIport\fP]]
|
|
Packit |
7b22a4 |
which can specify a single new destination IP address, an inclusive
|
|
Packit |
7b22a4 |
range of IP addresses. Optionally a port range,
|
|
Packit |
7b22a4 |
if the rule also specifies one of the following protocols:
|
|
Packit |
7b22a4 |
\fBtcp\fP, \fBudp\fP, \fBdccp\fP or \fBsctp\fP.
|
|
Packit |
7b22a4 |
If no port range is specified, then the destination port will never be
|
|
Packit |
7b22a4 |
modified. If no IP address is specified then only the destination port
|
|
Packit |
7b22a4 |
will be modified.
|
|
Packit |
7b22a4 |
In Kernels up to 2.6.10 you can add several \-\-to\-destination options. For
|
|
Packit |
7b22a4 |
those kernels, if you specify more than one destination address, either via an
|
|
Packit |
7b22a4 |
address range or multiple \-\-to\-destination options, a simple round-robin (one
|
|
Packit |
7b22a4 |
after another in cycle) load balancing takes place between these addresses.
|
|
Packit |
7b22a4 |
Later Kernels (>= 2.6.11-rc1) don't have the ability to NAT to multiple ranges
|
|
Packit |
7b22a4 |
anymore.
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-random\fP
|
|
Packit |
7b22a4 |
If option
|
|
Packit |
7b22a4 |
\fB\-\-random\fP
|
|
Packit |
7b22a4 |
is used then port mapping will be randomized (kernel >= 2.6.22).
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
\fB\-\-persistent\fP
|
|
Packit |
7b22a4 |
Gives a client the same source-/destination-address for each connection.
|
|
Packit |
7b22a4 |
This supersedes the SAME target. Support for persistent mappings is available
|
|
Packit |
7b22a4 |
from 2.6.29-rc2.
|
|
Packit |
7b22a4 |
.TP
|
|
Packit |
7b22a4 |
IPv6 support available since Linux kernels >= 3.7.
|