All of lore.kernel.org
 help / color / mirror / Atom feed
From: Joel Vosu <joel.vosu@mail.ee>
To: netfilter@lists.netfilter.org
Subject: Change source address on incoming packets
Date: Mon, 10 May 2004 00:50:30 +0300	[thread overview]
Message-ID: <409EA7A6.8070000@mail.ee> (raw)

I would need to be able to change the source address of incouming 
packets. I have 2 different subnets, but I need the server to see the 
packes from the 2nd subnet as coming from the 1st.
in iptables it would be something like:
iptables -A PREROUTING -t nat -s 2nd_subnet -j SNAT --to-source 
local_machine
but this is not possible because SNAT only works for outgoing packets in 
POSTROUTING.
Is there a way to get this to work other than adding a second router box 
for NAT?
I tried to do it like this:
Added another IP address eth0:0 to the server,
added rules:
iptables -A PREROUTING -t nat -d eth0:0_ip -p tcp --dport server-port -j 
DNAT --to-destination eth0_ip:server_port
iptables -A POSTROUTING -t nat -d eth0_ip -p tcp --dport server_port -j 
SNAT --to-source eth0:0_ip
but when I check from: iptables -L -t nat -nv then the second rule does 
not get used at all. I presume the pacet intended for local machine does 
not traverse the outgoing part of the nat table.


Sincerely,
Joel


             reply	other threads:[~2004-05-09 21:50 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-05-09 21:50 Joel Vosu [this message]
2004-05-09 22:14 ` Change source address on incoming packets Antony Stone
2004-05-09 22:31   ` Joel Vosu
2004-05-10 10:56 ` John A. Sullivan III
2004-05-13 12:36   ` Joel Vosu

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=409EA7A6.8070000@mail.ee \
    --to=joel.vosu@mail.ee \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.