Which command changes the source IP address to 192.0.2.11 for all IPv4 packets going through eth0?

Which command changes the source IP address to 192.0.2.11 for all IPv4 packets going through eth0?

• A. iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.0.2.11
• B. iptables -t nat -A PREROUTING -i eth0 -j SNAT --to-source 192.0.2.11
• C. iptables -t nat -A POSTROUTING -i eth0 -j DNAT --to-source 192.0.2.11
• D. iptables -t mangle -A POSTROUTING -o eth0 -j SNAT --to-source 192.0.2.11

Answer: (A)

The command that changes the source IP address to 192.0.2.11 for all IPv4 packets going through eth0 is structured correctly in the chosen option. The `iptables` tool is used to configure the packet filtering rules of the Linux kernel, and the `-t nat` option specifies that the command should operate on the NAT (Network Address Translation) table. In this case, using the POSTROUTING chain is appropriate because it modifies packets right before they are sent out on the interface. The `-o eth0` parameter directs the rule to apply to packets leaving the eth0 interface, ensuring that the source IP can be changed for outbound packets. The `-j SNAT` target specifically stands for Source NAT, which is designed to alter the source address of outgoing packets. The `--to-source 192.0.2.11` part clearly specifies the new source IP address that will be applied to all packets as they exit through eth0. The other options either misuse the NAT table or incorrectly target the wrong chain for the intended effect. For example, modifying packets in the PREROUTING chain would apply changes to incoming packets that haven't yet been routed, which doesn't fit the requirement of changing the source

The command that changes the source IP address to 192.0.2.11 for all IPv4 packets going through eth0 is structured correctly in the chosen option. The iptables tool is used to configure the packet filtering rules of the Linux kernel, and the -t nat option specifies that the command should operate on the NAT (Network Address Translation) table.

In this case, using the POSTROUTING chain is appropriate because it modifies packets right before they are sent out on the interface. The -o eth0 parameter directs the rule to apply to packets leaving the eth0 interface, ensuring that the source IP can be changed for outbound packets. The -j SNAT target specifically stands for Source NAT, which is designed to alter the source address of outgoing packets. The --to-source 192.0.2.11 part clearly specifies the new source IP address that will be applied to all packets as they exit through eth0.

The other options either misuse the NAT table or incorrectly target the wrong chain for the intended effect. For example, modifying packets in the PREROUTING chain would apply changes to incoming packets that haven't yet been routed, which doesn't fit the requirement of changing the source