[LARTC] Is it possible to control uplink in a NATted environment

[LARTC] Is it possible to control uplink in a NATted environment

[Logu]

Hi all,

Given below ia the simple network diagram. I need to control uplink for the
individual private network IPs as depicted in the diagram. Is this possible
in a NATed environment using CBQ or HTB. I learnt that we can control only
outgoing traffic. So if I control in the eth1 interface the source IP will
be masqueraded, and it may not result in the desired behaviour.

Is there a solution to address this issue.

                              GATEWAY

  private net work   |-----------|
 -------------------|                 |------------------------Internet
                      eth0 |-----------| eth1 NAT

Thanks
-logu

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

Re: [LARTC] Is it possible to control uplink in a NATted environment

[Damion de Soto]

Hi Logu,

 > So if I control in the eth1 interface the source IP will
> be masqueraded, and it may not result in the desired behaviour.
> 
> Is there a solution to address this issue.
You can use iptables to set different marks on the packets,
and then filter based on those marks.

regards,

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Damion de Soto - Software Engineer  email:     damion@snapgear.com
SnapGear - A CyberGuard Company ---    ph:         +61 7 3435 2809
  | Custom Embedded Solutions          fax:         +61 7 3891 3630
  | and Security Appliances            web: http://www.snapgear.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  ---  Free Embedded Linux Distro at   http://www.snapgear.org  ---
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/