MASQUERADE with MAC

abakali · 12-10-2005, 12:39 AM

Hello - can i MASQUERADE all ports with defined mac i done it by ip tell me how to do this from mac

/sbin/iptables -t nat -A POSTROUTING -s 10.0.3.120 -o $EXTDEV -j MASQUERADE

this is true statement to MASQUERADE with MAC ?
/sbin/iptables -t nat -A POSTROUTING -m mac --mac-source 00:00:00:00:00:00 -o $EXTDEV -j MASQUERADE

peter_robb · 12-10-2005, 05:09 PM

MAC won't work after routing. Packets will gain the MAC of the local machine when they get onto the eth cable. MAC is carried by the ethernet frame, and this is carrying the ip packet inside it.

You will need to MARK the packets in the mangle PREROUTING table and then MASQUERADE based on the MARK you have set.

I can't think of any useful reason to do this, so I gotta ask what you are trying to achieve..