Manpage of IPTABLES
You can add several --to-destination options. If you specify more
than one destination address, either via an address range or multiple --to-destination options, a
simple round-robin (one after another in cycle) load balancing takes place between these adresses.
MASQUERADE
This target is only valid in the nat table, in the POSTROUTING chain. It should only be used with
dynamically assigned IP (dialup) connections: if you have a static IP address, you should use the SNAT
target. Masquerading is equivalent to specifying a mapping to the IP address of the interface the packet is
going out, but also has the effect that connections are forgotten when the interface goes down. This is the
correct behavior when the next dialup is unlikely to have the same interface address (and hence any
established connections are lost anyway). It takes one option:
--to-ports port[-port]
This specifies a range of source ports to use, overriding the default SNAT source port-selection
heuristics (see above). This is only valid if the rule also specifies -p tcp or -p udp.
REDIRECT
This target is only valid in the nat table, in the PREROUTING and OUTPUT chains, and user-defined
chains which are only called from those chains. It alters the destination IP address to send the packet to
the machine itself (locally-generated packets are mapped to the 127.0.0.1 address). It takes one option:
--to-ports port[-port]
This specifies a destination port or range of ports to use: without this, the destination port is never
altered. This is only valid if the rule also specifies -p tcp or -p udp.
ULOG
This target provides userspace logging of matching packets. When this target is set for a rule, the Linux
kernel will multicast this packet through a netlink socket. One or more userspace processes may then
subscribe to various multicast groups and receive the packets. Like LOG, this is a "non-terminating
target", i.e. rule traversal continues at the next rule.
--ulog-nlgroup nlgroup
http://www.iptablesrocks.org/syntax/man_iptables.htm (15 of 20) [2/13/2004 8:04:51 PM]
