Thread: Question about iptables logic

i have rule works properly:

code:

*nat  -a prerouting -i eth0 -p tcp -m tcp ! -d 192.168.100.150/32 --dport 80 -j redirect --to-port 1000

however, need exclude 192.168.100.151 same redirect, , have run out of ideas in how this. using range not seem work.

have tried separating different rules, , i'm afraid may have misunderstanding in order rules applied. there easy way "for tcp destined 192.168.100.151, leave alone" after or before redirecting other traffic?

(unfortunately depends on hard coded third party vendor, cannot separate onto subnet.)

rules applied in order listed -l option.
have tried add rule before 1 matches on dest ip , has target accept doesn't rule? think should work.

think perhaps redirect target recognizes matches on protocol , not dest ip (i'm not sure though).

Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [ubuntu] Question about iptables logic

Ubuntu