Drop in nat postrouting

Tekiano · 11-13-2012, 04:31 AM

Hi all,

I'm new in configuring network using iptables, could you please explain to what does the following command do,
and how to replace it with the new iptables version (I have to port it to a new version, in the old version it works)

here the command and the command result :

Code:

$ iptables -t nat -P POSTROUTING DROP
iptables v1.4.12: 
The "nat" table is not intended for filtering, the use of DROP is therefore inhibited.
Try `iptables -h' or 'iptables --help' for more information.

Thank You,

acid_kewpie · 11-13-2012, 04:35 AM

it does nothing, as the message says.

What it's supposed to do...? Well... if it worked it would drop everything as it leaves the box, which is very weird a thing to want to do. I guess the closest would be "iptables -A OUTPUT -j DROP"... which is equally bizarre. You really can't just take this mess and convert it, you need to understand what it's meant to be doing from internal docs / discussions if you're going to do your job properly.