[Bridge] NAT on a bridge (solved sortof)

[Bridge] NAT on a bridge (solved sortof)

[Michiel Brandenburg]

Torsten,

I suffered a similar problem and was wondering if you found a better 
solution to the problem of dnatting on a transparent bridge.

My setup: INTERNET <-> ROUTER <-> (linux)BRIDGE <-> INTERNAL NETWORK

Solution: setup a bridge with ip x.x.x.51 and alias another ip to the 
bridge x.x.x.50 ( using a /16 network at home )  Now get the router to 
send all incomming traffic to .50
DNAT traffic you want on your bridge to .51 and other traffic to say 
.101 Now it works .. very strange, hey works here.

<-------------------- rules ------------------------------>
iptables -t nat -N toZeus
iptables -t nat -I toZeus -m physdev --physdev-in eth1 \
	-s ! x.x.0.0/16 -j DNAT --to x.x.x.51
iptables -t nat -N toHerc
iptables -t nat -I toHerc -m physdev --physdev-in eth1 \
	-s ! x.x.0.0/16 -j DNAT --to x.x.x.101
iptables -t nat -I PREROUTING -p tcp -m multiport  \
	-d x.x.x.50 --destination-ports \ 					 
ftp,sftp,ssh,smtp,ssmtp,http,pop3,pop3s,imap,imaps \
	-j toZeus
iptables -t nat -I PREROUTING -p udp -m multiport \
	-d x.x.x.50 --destination-ports 41111 -j toHerc
iptables -t nat -I PREROUTING -p tcp -m multiport \
	-d x.x.x.50 --destination-ports 41111 -j toHerc
<-------------------- end rules --------------------------->

I just joined this list sorry, if I missed the solution.

Michiel Brandenburg