All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ed W <lists@wildgooses.com>
To: Anton Melser <anton@linux.com>
Cc: netfilter@vger.kernel.org
Subject: Re: Advice on best way to set up multi-route NAT for lots of IPs
Date: Fri, 27 Jan 2012 23:54:21 +0000	[thread overview]
Message-ID: <4F23392D.5010608@wildgooses.com> (raw)
In-Reply-To: <CAKywjPqGyr+eX=BHhn65ehNn=KH9jw76SoqG6awb8AYh+htOeg@mail.gmail.com>

On 02/01/2012 13:17, Anton Melser wrote:
>> you can probably also do this by adding
>> the public IPs to your mailserver?
> Definitely, makes load shifting very complicated though...

OK, so if you want an external "load balancer" then your problem reduces 
to *indicating* the desired mapped source address.

If the NAT is on an external box then you can't use fwmarks.  You can 
use either source port or dest port.  You could also add all IPs to all 
servers, but that seems rather tricky to make work in practice.  I think 
your best bet might be a hack, to use dest port as the indicator for 
"source IP".  Set your DNAT to map some range of dest ports to change 
the source to the IP and the dest port to 25. This will allow all 
machines to send and masquerade as any source ip...

I haven't quite thought this through, but I think it will work?


Good luck

Ed W

  reply	other threads:[~2012-01-27 23:54 UTC|newest]

Thread overview: 29+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-01-01 16:10 Advice on best way to set up multi-route NAT for lots of IPs Anton Melser
2012-01-01 20:24 ` Lloyd Standish
2012-01-01 20:41   ` Anton Melser
2012-01-01 21:36     ` Anton Melser
2012-01-01 22:11     ` Lloyd Standish
2012-01-02  9:00       ` Anton Melser
2012-01-02 16:10         ` Lloyd Standish
2012-01-02 22:14           ` Anton Melser
2012-01-03  0:46             ` Lloyd Standish
2012-01-03  8:56               ` Anton Melser
2012-01-04 15:15                 ` Anton Melser
2012-01-05  7:37             ` Andrew Beverley
2012-01-02 18:01       ` Pete
2012-01-02 21:14         ` Anton Melser
2012-01-02 12:38 ` Ed W
2012-01-02 13:17   ` Anton Melser
2012-01-27 23:54     ` Ed W [this message]
2012-01-05  7:35 ` Andrew Beverley
2012-01-05  8:15   ` Anton Melser
2012-01-05 17:06     ` Andrew Beverley
2012-01-05 18:39     ` Rob Sterenborg (Lists)
2012-01-06  5:15       ` Anton Melser
2012-01-06  7:28         ` Andrew Beverley
2012-01-05  8:59 ` Rob Sterenborg (lists)
2012-01-05 11:59   ` Anton Melser
2012-01-05 13:17     ` Rob Sterenborg (lists)
2012-01-05 16:59     ` Andrew Beverley
2012-01-05 17:08       ` Rob Sterenborg (lists)
2012-01-05 17:14         ` Andrew Beverley

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4F23392D.5010608@wildgooses.com \
    --to=lists@wildgooses.com \
    --cc=anton@linux.com \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.