[ILUG] libvirtd NAT iptable rules on fedora

[Bailey, Darragh]

> -----Original Message-----
> From: Andrew McGill [mailto:list2010 at lunch.za.net] 
> Sent: 17 November 2010 05:30
> To: Bailey, Darragh
> Cc: ilug at linux.ie
> Subject: Re: [ILUG] libvirtd NAT iptable rules on fedora

<snip>
> The iptables -t nat -L output is a little difficult to read 
> for complex rules.  If you run
> 
> 	iptables-save | grep MASQUERADE 
> 
> you will get these rule in a format very similar to the 
> iptables command line format (iptables -t nat is missing from 
> the front, and that's all).  To decode that, the relevant 
> part of the man page is ...
> 
> 	man -P 'less -p MASQUERADE' iptables
> 
> &:-)

Useful tip for working out complex rules, thanks. Hadn't thought to use iptables-save to see how they were created.

I understood how those particular rules were created in this case, but since I didn't know the reason behind them I wasn't 100% confident in that my understanding of how they worked was correct.

--
Regards,
Darragh Bailey