From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
To: 'netfilter' <netfilter@vger.kernel.org>
Subject: Re: Forward packets from one interface to another?
Date: Wed, 04 Feb 2009 12:18:43 +0100 [thread overview]
Message-ID: <49897993.8000105@plouf.fr.eu.org> (raw)
In-Reply-To: <4988C198.2030802@mailinator.com>
Hello,
Mike Wright a écrit :
> Rick Jones wrote:
>>
>> If instead, you further subnettted 192.168.1 with a /25 on the PCs
>> (but still a /24 on the router), the Router/Firewall wouldn't have to
>> know about the other subnet. It could just blythly ass-u-me that the
>> end-PC was on the same network segment as the middle PC. So long as
>> the middle PC was configured with a static, public ARP entry for the
>> IP of the end PC, and had ip_forwarding enabled, it would "front" for
>> the end PC.
>
> How does the middle PC setup the static, public ARP entry?
By enabling proxy ARP on the interface connected to net A in your
diagram (/proc/sys/net/ipv4/<interface>/proxy_arp).
However you might have trouble if your applications rely on broadcast
packets which cannot be forwarded by routers.
next prev parent reply other threads:[~2009-02-04 11:18 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-02-03 17:53 Forward packets from one interface to another? Kārlis Repsons
2009-02-03 19:21 ` Gilad Benjamini
2009-02-03 19:40 ` Kārlis Repsons
2009-02-03 19:49 ` Gilad Benjamini
2009-02-03 20:04 ` Kārlis Repsons
2009-02-03 20:24 ` bsilva
2009-02-03 21:37 ` Rick Jones
2009-02-03 21:48 ` bsilva
2009-02-03 22:13 ` Mike Wright
2009-02-03 22:24 ` Rick Jones
2009-02-04 11:18 ` Pascal Hambourg [this message]
2009-02-03 21:32 ` Gilad Benjamini
2009-02-03 20:45 ` Rick Jones
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=49897993.8000105@plouf.fr.eu.org \
--to=pascal.mail@plouf.fr.eu.org \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.