xref: /aosp_15_r20/external/iptables/extensions/libxt_MASQUERADE.man (revision a71a954618bbadd4a345637e5edcf36eec826889)
1*a71a9546SAutomerger Merge WorkerThis target is only valid in the
2*a71a9546SAutomerger Merge Worker.B nat
3*a71a9546SAutomerger Merge Workertable, in the
4*a71a9546SAutomerger Merge Worker.B POSTROUTING
5*a71a9546SAutomerger Merge Workerchain.  It should only be used with dynamically assigned IP (dialup)
6*a71a9546SAutomerger Merge Workerconnections: if you have a static IP address, you should use the SNAT
7*a71a9546SAutomerger Merge Workertarget.  Masquerading is equivalent to specifying a mapping to the IP
8*a71a9546SAutomerger Merge Workeraddress of the interface the packet is going out, but also has the
9*a71a9546SAutomerger Merge Workereffect that connections are
10*a71a9546SAutomerger Merge Worker.I forgotten
11*a71a9546SAutomerger Merge Workerwhen the interface goes down.  This is the correct behavior when the
12*a71a9546SAutomerger Merge Workernext dialup is unlikely to have the same interface address (and hence
13*a71a9546SAutomerger Merge Workerany established connections are lost anyway).
14*a71a9546SAutomerger Merge Worker.TP
15*a71a9546SAutomerger Merge Worker\fB\-\-to\-ports\fP \fIport\fP[\fB\-\fP\fIport\fP]
16*a71a9546SAutomerger Merge WorkerThis specifies a range of source ports to use, overriding the default
17*a71a9546SAutomerger Merge Worker.B SNAT
18*a71a9546SAutomerger Merge Workersource port-selection heuristics (see above).  This is only valid
19*a71a9546SAutomerger Merge Workerif the rule also specifies one of the following protocols:
20*a71a9546SAutomerger Merge Worker\fBtcp\fP, \fBudp\fP, \fBdccp\fP or \fBsctp\fP.
21*a71a9546SAutomerger Merge Worker.TP
22*a71a9546SAutomerger Merge Worker\fB\-\-random\fP
23*a71a9546SAutomerger Merge WorkerRandomize source port mapping (kernel >= 2.6.21).
24*a71a9546SAutomerger Merge WorkerSince kernel 5.0, \fB\-\-random\fP is identical to \fB\-\-random-fully\fP.
25*a71a9546SAutomerger Merge Worker.TP
26*a71a9546SAutomerger Merge Worker\fB\-\-random-fully\fP
27*a71a9546SAutomerger Merge WorkerFully randomize source port mapping (kernel >= 3.13).
28*a71a9546SAutomerger Merge Worker.TP
29*a71a9546SAutomerger Merge WorkerIPv6 support available since Linux kernels >= 3.7.
30