I'm stuck with an AT&T gateway that doesn't understand a MAC can have more than 1 IP address. So I'm using macvlan on linux to add ports with different mac addresses.
This seem to work for local connections to the macvlan ports. But, when I try and DNAT them into a private DMZ the packets seem to disappear. I have ip_forwarding turned on and other outgoing packet forwarding is working.
I've used tcpdump and trace in iptables to no avail. The DNAT rule fires, then the packets never emerge anywhere.
I'm running Centos 6.3.