DST NAT Redirect NOT working?

michianawireless · April 22, 2012, 6:11am

I have 5.7 installed.

I have a mangle rules to mangle a given domain to mark the packet destined to test.com with the packet-mark=proxy

0 chain=forward action=mark-packet new-packet-mark=proxy passthrough=yes content=test.com

this is working fine counters are incrementing.

Now I have a rule to redirect traffic marked with packet-mark=proxy to the local proxy server but its not working:

0 chain=dstnat action=redirect to-ports=8080 protocol=tcp src-address=10.3.1.18 packet-mark=proxy

The mangle rules marking packets but the nat is not redirecting? I also tried connection-mark same results mangle works but redirect rule doesnt.

Any ideas?

cbrown · April 23, 2012, 1:20pm

Look at this. This will help. Your dst-nat is happening before you mark your packet.

michianawireless · April 23, 2012, 10:26pm

Thanks for the link. I do see that what you are saying … So how do I get around this?