From: Joel Vosu <joel.vosu@mail.ee>
To: netfilter@lists.netfilter.org
Subject: Change source address on incoming packets
Date: Mon, 10 May 2004 00:50:30 +0300 [thread overview]
Message-ID: <409EA7A6.8070000@mail.ee> (raw)
I would need to be able to change the source address of incouming
packets. I have 2 different subnets, but I need the server to see the
packes from the 2nd subnet as coming from the 1st.
in iptables it would be something like:
iptables -A PREROUTING -t nat -s 2nd_subnet -j SNAT --to-source
local_machine
but this is not possible because SNAT only works for outgoing packets in
POSTROUTING.
Is there a way to get this to work other than adding a second router box
for NAT?
I tried to do it like this:
Added another IP address eth0:0 to the server,
added rules:
iptables -A PREROUTING -t nat -d eth0:0_ip -p tcp --dport server-port -j
DNAT --to-destination eth0_ip:server_port
iptables -A POSTROUTING -t nat -d eth0_ip -p tcp --dport server_port -j
SNAT --to-source eth0:0_ip
but when I check from: iptables -L -t nat -nv then the second rule does
not get used at all. I presume the pacet intended for local machine does
not traverse the outgoing part of the nat table.
Sincerely,
Joel
next reply other threads:[~2004-05-09 21:50 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-05-09 21:50 Joel Vosu [this message]
2004-05-09 22:14 ` Change source address on incoming packets Antony Stone
2004-05-09 22:31 ` Joel Vosu
2004-05-10 10:56 ` John A. Sullivan III
2004-05-13 12:36 ` Joel Vosu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=409EA7A6.8070000@mail.ee \
--to=joel.vosu@mail.ee \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.