I am working on an iptables rule to apply after my shorewall script has initialized the firewall. I want a specific IP address (10.0.1.19) in my lan to be redirected to 10.0.64.1 unless it is going to paypal.
I have the following rule, and that works like a charm:
iptables -t nat -A PREROUTING ! -d 220.127.116.11 -s 10.0.1.19 -j DNAT --to 10.0.64.1
My problem is that paypal uses multiple ip addresses and I am not allowed to have multiple IP-addresses.
On top of this problem I would like to know how to remove the rule again, without having to restart shorewall.