lundi 23 février 2015

iptables - How to remove connection tracking



I'm using this command for redirect all web traffic (http) into my local web server



iptables -t nat -I PREROUTING -p tcp --dport 80 -j DNAT --to 192.168.11.100

Then i test, access a website and got redirect. It works!


After that, i want add some mac address to let's them access internet without redirect, i used this command:



iptables -t nat -I PREROUTING -m mac --mac-source XX-XX-XX-XX-XX-XX -j ACCEPT

Then i test, reloading website i entered before, but nothing change, it still got redirect to my local web server. But i can access another website. So i think it works!


My question is: How can i remove something like connection tracking or something like that, i want after execute the second command, i can reload the website i entered before without redirect.





Aucun commentaire:

Enregistrer un commentaire