Re: NAT with Multiple Public IPs

["John A. Sullivan III" <jsullivan@opensourcedevel.com>]

On Fri, 2005-11-11 at 23:21 +0530, hareram wrote:
> Hi all
> 
> iam trying to build more than 1000 users network
> 
> now days i see some problem with yahoo
> 
> if using one IP source NAT, yahoo blocking that IP due to some problems come 
> with that IP
> 
> so how can make NAT using 255 IP
> with 1000users
> 
> this should do randomly using 255 IP;s
> 
> any examples
> 
> hare 
> 
> 
> 
One can NAT to a range of IP addresses.  That used to produce a rough
round robin distribution of addresses; I'm not sure if that is still the
case.  Thus you would have:

iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source
1.1.1.1-1.1.1.254 
or something similar.

Although it is not complete, the ISCS network security management
project (http://iscs.sourceforge.net) automates the creation of even the
most complex NAT including many to some, some to many, overlapping and
nested NAT.  Good luck - John
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan@opensourcedevel.com

Financially sustainable open source development
http://www.opensourcedevel.com