From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@lists.netfilter.org>
Subject: Re: Newbie request
Date: Tue, 12 Dec 2006 20:37:29 -0600 [thread overview]
Message-ID: <457F6769.8030705@riverviewtech.net> (raw)
In-Reply-To: <1267.193.173.119.247.1165921850.squirrel@webmail.sterenborg.info>
On 12/12/06 05:10, Rob Sterenborg wrote:
> Yes, I was assuming that the default gateway is set to the router's IP, but in
> fact we don't know about the connection to the internet which is there
> somewhere.
No, we do not know about the gateway. However, recall from the OP that
"eth1 is set to DHCP and is part of 192.168.0.0/24", which means that
the route back to the 192.168.1.0/24 network could change as the
""router in question reboots. So, either the routers are running some
sort of routing protocol, or the 192.168.1.0/24 network needs to be
""hidden from the 192.168.0.0/24 network. This is very easily
accomplished with SNAT / MASQUERADE.
Something to keep in mind is that the source IP is a dynamic IP on the
192.168.0.0/24 network, so it would be better if MASQUERADE was used
verses SNAT. SNAT does not clear out stale nat translations like
MASQUERADE does when the IP for the interface changes.
Grant. . . .
prev parent reply other threads:[~2006-12-13 2:37 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-12-12 7:34 Newbie request Nandan Bhat
2006-12-12 8:31 ` Rob Sterenborg
2006-12-12 10:47 ` Pascal Hambourg
2006-12-12 11:10 ` Rob Sterenborg
2006-12-13 2:37 ` Grant Taylor [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=457F6769.8030705@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.