Operation Manual
SFX SERIES USER’S GUIDE
Rev 2.2 58
Menu Item Description
Show DNAT Table Selecting this button will always return you back to the Destination NAT Table page, as shown
in Figure 2- 29.
Edit DNAT Table Selecting this button will enter the Edit Destination NAT Table page, as shown in Figure 2- 30.
Figure 2- 30 Edit Destination NAT Table Page
The following fields can be edited on the Edit DNAT Table page:
Edit Field Description
! Clicking on the “not” (!) check box negates the logic for the immediate edit field to the right of the
check box. For example, ! 192.168.1.86 for the Source IP would mean all IP packets whose
source IP address is not 192.168.1.86.
Source IP Enter a source IP Address in dotted decimal notation, here if you wish to filter IP packets on
their source address.
Port
Enter a TCP or UDP Port number in any of the three port fields ((Source IP, Destination IP, &
New Destination), if you wish. If a port is specified, you must select a specific protocol (TCP or
UDP).
Destination IP Enter a Destination IP Address in dotted decimal notation, here if you wish to filter IP packets on
their destination IP address.
New Destination Enter a New Destination IP address that will replace the original Destination IP address.
Protocol Enter the IP packet protocol. Options are All Protocols (default), UDP/IP Protocol, or TCP/IP
Protocol. If port numbers are specified in a rule, you must select UDP or TCP.
Options This field is available for “power users”, who wish to enter additional iptables options. Care
must be taken in doing so, and order may matter on entry of options. Some combinations may
not be possible. Consult the Linux iptables manual or tutorial for more information.
In addition to the edit fields there are four table row manipulation keys:
NOTE
:
The
Source IP/Port
and Destination
IP/Port fields
are optional,
and “Any” is the
implied default
value.
You must press
Send Update
for any changes
to take effect
NOTE
:
New
DNAT rules
committed to
the table (when
Send Update is
pressed) may
not take
immediate
effect if the
applicable IP
data stream is
in progress. A
suitable period
of no data
activity for that
IP stream (as
determined by
Linux) may
need to take
place first
before the new
rule applies.