From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <marc@merlins.org>
Received: from mail1.merlins.org (magic.merlins.org [209.81.13.136])
	(using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits))
	(Client did not present a certificate)
	by huchra.bufferbloat.net (Postfix) with ESMTPS id 8AFBD21F19B
	for <cerowrt-users@lists.bufferbloat.net>;
	Mon,  4 Mar 2013 22:07:03 -0800 (PST)
Received: from merlin by mail1.merlins.org with local (Exim 4.80 #2)
	id 1UCl1i-0008Iu-VR for <cerowrt-users@lists.bufferbloat.net>;
	Mon, 04 Mar 2013 22:07:03 -0800
Date: Mon, 4 Mar 2013 22:07:02 -0800
From: Marc MERLIN <marc@merlins.org>
To: cerowrt-users@lists.bufferbloat.net
Message-ID: <20130305060702.GE15079@merlins.org>
References: <20130305050111.GB15079@merlins.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20130305050111.GB15079@merlins.org>
X-Sysadmin: BOFH
X-URL: http://marc.merlins.org/
X-Operating-System: Proudly running Linux
	3.1.5-core2-volpreempt-noide-hm64-20111218/Debian squeeze/sid
X-Mailer: Some Outlooks can't quote properly without this header
User-Agent: Mutt/1.5.13 (2006-08-11)
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: marc@merlins.org
Subject: Re: [Cerowrt-users] no xt_TRACE in kernel
X-BeenThere: cerowrt-users@lists.bufferbloat.net
X-Mailman-Version: 2.1.13
Precedence: list
List-Id: Support for user problems regarding cerowrt
	<cerowrt-users.lists.bufferbloat.net>
List-Unsubscribe: <https://lists.bufferbloat.net/options/cerowrt-users>,
	<mailto:cerowrt-users-request@lists.bufferbloat.net?subject=unsubscribe>
List-Archive: <https://lists.bufferbloat.net/pipermail/cerowrt-users>
List-Post: <mailto:cerowrt-users@lists.bufferbloat.net>
List-Help: <mailto:cerowrt-users-request@lists.bufferbloat.net?subject=help>
List-Subscribe: <https://lists.bufferbloat.net/listinfo/cerowrt-users>,
	<mailto:cerowrt-users-request@lists.bufferbloat.net?subject=subscribe>
X-List-Received-Date: Tue, 05 Mar 2013 06:07:03 -0000

On Mon, Mar 04, 2013 at 09:01:11PM -0800, Marc MERLIN wrote:
> But if I do this from the lan, it shoul darrive on br-lan and be re-forwarded out 
> on the br-lan interface, but that's not working.

I forgot to say that the answer to this is to use SNAT, something like
iptables -t nat -I POSTROUTING 1 -d dest -p tcp --dport 443 -s 192.168.1.1/24 -j SNAT --to 192.168.1.254

but my question was more about xt_TRACE than fixing this specific problem :)

Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/