A Linux host is being configured as a gateway between an internal 172.16.0.0/24 network and the public Internet. After enabling packet forwarding, the administrator issues the command:
The rule appends (-A) an entry to the nat table's POSTROUTING chain. Only Source NAT (SNAT or masquerade) is valid in POSTROUTING, and the --to-source option confirms that the source address will be rewritten to 203.0.113.14. POSTROUTING is reached after the kernel's routing decision and immediately before the frame leaves the system on the specified interface. Destination NAT (DNAT) is done in PREROUTING (or OUTPUT for local traffic), and no form of NAT is allowed in INPUT or FORWARD chains. Therefore the correct description is "Source NAT in POSTROUTING just before egress."
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the function of the POSTROUTING chain in iptables?
Open an interactive chat with Bash
How does Source NAT (SNAT) differ from Destination NAT (DNAT)?
Open an interactive chat with Bash
Why is NAT important in a network gateway configuration?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .