All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ken Price <kprice@agentware.net>
To: lartc@vger.kernel.org
Subject: RE: [LARTC] 2-NIC DMZ?
Date: Mon, 28 Oct 2002 22:05:08 +0000	[thread overview]
Message-ID: <marc-lartc-103584377817372@msgid-missing> (raw)
In-Reply-To: <marc-lartc-103582233922684@msgid-missing>

*VERY* easy.  No routing rules involved, just IPTABLES:

For your workstation:
# iptables -t nat -A POSTROUTING -s 192.168.0.5 (your workstation statis IP)
-o eth0 -j SNAT --to PUBLIC_IP_1
Then, for everyone else:
# iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to PUBLIC_IP_2


-Ken


-----Original Message-----
From: Justin Richer [mailto:ru2def@whoever.com]
Sent: Monday, October 28, 2002 11:28 AM
To: lartc@mailman.ds9a.nl
Subject: [LARTC] 2-NIC DMZ?


Hi all,

I have two static IPs from my ISP. I would like one of these IPs to be
directed to my desktop box all the time, and the other to be directed to a
DHCP-served NAT network. I've nearly gotten it working using iptables and
iproute2, but one problem is that i would like packets coming from my
desktop box via the firewall to be printed with my desktop's external IP.
They are currently being seen as from the NAT-hosted IP, which is the main
IP address of the firewall box's external NIC. My setup looks like this:

 DSL Bridge -> [eth0] Firewall [eth1] -> 8-port-switch -> static desktop
                                                        \-> (NAT cloud)

is it possible to send packets from the firewall looking like they came from
a different external IP address based on which internal IP they were routed
from? it seems to me it really should be possible to do ... just, how?

Thanks,
  -- Justin

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/
_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

  parent reply	other threads:[~2002-10-28 22:05 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-28 16:27 [LARTC] 2-NIC DMZ? Justin Richer
2002-10-28 18:27 ` Lars Munch
2002-10-28 21:06 ` Lars Munch
2002-10-28 22:05 ` Ken Price [this message]
2002-10-28 22:33 ` Justin Richer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-103584377817372@msgid-missing \
    --to=kprice@agentware.net \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.