Help on iptables!!!!!!

krish_vrp · 05-20-2008, 03:50 AM

I am using a SuSE Linux Ent Server 10 SP1 box

I have an interface with 10 virtual interfaces and I have 10 users

I want to map each user to one IP so I can distinguish them even outside the network. So I tried the following and got this error.

iptables -t nat -A OUTPUT -m owner --owner-id 1000 -j SNAT --to-source x.x.x.x (where this is one the virtual IPs)

but it throws me unknown error 4294967295

can anyone help me out!!

win32sux · 05-20-2008, 11:53 PM

Quote:

Originally Posted by krish_vrp

I am using a SuSE Linux Ent Server 10 SP1 box

I have an interface with 10 virtual interfaces and I have 10 users

I want to map each user to one IP so I can distinguish them even outside the network. So I tried the following and got this error.

iptables -t nat -A OUTPUT -m owner --owner-id 1000 -j SNAT --to-source x.x.x.x (where this is one the virtual IPs)

but it throws me unknown error 4294967295

can anyone help me out!!

It's supposed to be --uid-owner, not --owner-id. Also keep in mind that the owner match module only works in the OUTPUT chain of the filter table.

krish_vrp · 05-21-2008, 02:51 AM

oh....that was a typo i spelled it rite only when i executed....ur true it only works in OUTPUT of FILTER but also works in POSTROUTING.....i got the problem solved by putting in POSTROUTING of NAT...neway thanks for ur reply!!!