Patrick McHardy wrote: > Please try if this patch helps. > > + .hooks = 1 << NF_IP_PRE_ROUTING || 1 << NF_IP_LOCAL_OUT,
I shouldn't send patches before getting out of bed .. :) Please try this one instead.
[NETFILTER]: Fix DNAT in LOCAL_OUT Signed-off-by: Patrick McHardy <[EMAIL PROTECTED]> --- commit 2ceefa038e908d5da21aefedae02da4eab1b2787 tree 417f03eca3b97b16a78321ace1556e57f5c60351 parent 8cc24d7ca2ffc6d9d70e1d94dc8dffbdf677e58f author Patrick McHardy <[EMAIL PROTECTED]> Sat, 08 Apr 2006 13:59:53 +0200 committer Patrick McHardy <[EMAIL PROTECTED]> Sat, 08 Apr 2006 13:59:53 +0200 net/ipv4/netfilter/ip_nat_rule.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/net/ipv4/netfilter/ip_nat_rule.c b/net/ipv4/netfilter/ip_nat_rule.c index efba8c4..1aba926 100644 --- a/net/ipv4/netfilter/ip_nat_rule.c +++ b/net/ipv4/netfilter/ip_nat_rule.c @@ -279,7 +279,7 @@ static struct ipt_target ipt_dnat_reg = .target = ipt_dnat_target, .targetsize = sizeof(struct ip_nat_multi_range_compat), .table = "nat", - .hooks = 1 << NF_IP_PRE_ROUTING, + .hooks = (1 << NF_IP_PRE_ROUTING) | (1 << NF_IP_LOCAL_OUT), .checkentry = ipt_dnat_checkentry, };