Re: Routing problem

["Carlos Fernandez Sanz" <cfs-netfilter@nisupu.com>]

Scott,

By "carrier expects traffic to come from one WAN IP" I don't mean it has to
have that origin IP but come from a router with that IP.

Obviously they assumed that the regular setup is

Internet <----> their router <-----> our router <------> Box with IP #1
(could be a firewall) <-----> NAT

(i.e. there would be one router whose job in life is to get traffic from
their router and direct it to us)

However we are a small company and we need to have everything in one box,
i.e. the router that connects with the carrier, the firewall, the web
server, etc :-)



----- Original Message ----- 
From: "Scott MacKay" <scottmackay@yahoo.com>
To: "Carlos Fernandez Sanz" <cfs-netfilter@nisupu.com>; "netfilter"
<netfilter@lists.netfilter.org>
Sent: Friday, February 13, 2004 18:16
Subject: Re: Routing problem


> AH, I think I get what you are saying.
> You have a linux doing NAT, 1 public IP on the outside
> and 1 private on the inside.  You also have a spare
> public IP which you want to put on a client so they
> can do some funky things which requires them having a
> real IP address.
> 1 question about your statement.  Where you say
> "carrier expects traffic to come from one WAN IP"
> kinda goes against what you implied by "public IP 2".
> If you have 2 pubic IPs, they they cannot expect your
> traffic to come from 1 WAN IP.  Even if you NAT a
> private address explicitly to the 2nd public IP
> address that counts as 2.  Do you have 1 or 2 public
> IP addresses?
> If you are given 2, then you should be able to do the
> config mentioned, putting the client on the same side
> as the router's public IP (since they are both in the
> same class C).  If you have 1, well you are SOL.
>
>
>
>
>
>
>
>
> --- Carlos Fernandez Sanz <cfs-netfilter@nisupu.com>
> wrote:
> > > >
> > > > Before you ask: I can't connect this special
> > computer to the same place
> > I
> > > > connect the linux box (which would be the
> > obvious solution) because the
> > > > carrier expects traffic to come from one WAN IP,
> > owned by the linux box.
> > >
> > > How do they expect you to use any of the other IPs
> > in the pool they have
> > given
> > > you?
> >
> > I do use them by redirecting traffic from the linux
> > box to the destination
> > boxes (such as all trafic for public IP 2 goes to
> > 192.168.21.2, for
> > example). This works fine, *except* in this
> > particular case, where any
> > NATing is not an option. I need the computer behind
> > the linux box to
> > actually own the public address, because it signs
> > packets with it.
> >
> >
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! Finance: Get your refund fast by filing online.
> http://taxes.yahoo.com/filing.html
>