From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Carlos Fernandez Sanz" Subject: Re: Routing problem Date: Sat, 14 Feb 2004 09:47:06 +0100 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000f01c3f2d7$1ff24f50$1530a8c0@HUSH> References: <20040213171620.97236.qmail@web13904.mail.yahoo.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Scott MacKay , netfilter Scott, By "carrier expects traffic to come from one WAN IP" I don't mean it has to have that origin IP but come from a router with that IP. Obviously they assumed that the regular setup is Internet <----> their router <-----> our router <------> Box with IP #1 (could be a firewall) <-----> NAT (i.e. there would be one router whose job in life is to get traffic from their router and direct it to us) However we are a small company and we need to have everything in one box, i.e. the router that connects with the carrier, the firewall, the web server, etc :-) ----- Original Message ----- From: "Scott MacKay" To: "Carlos Fernandez Sanz" ; "netfilter" Sent: Friday, February 13, 2004 18:16 Subject: Re: Routing problem > AH, I think I get what you are saying. > You have a linux doing NAT, 1 public IP on the outside > and 1 private on the inside. You also have a spare > public IP which you want to put on a client so they > can do some funky things which requires them having a > real IP address. > 1 question about your statement. Where you say > "carrier expects traffic to come from one WAN IP" > kinda goes against what you implied by "public IP 2". > If you have 2 pubic IPs, they they cannot expect your > traffic to come from 1 WAN IP. Even if you NAT a > private address explicitly to the 2nd public IP > address that counts as 2. Do you have 1 or 2 public > IP addresses? > If you are given 2, then you should be able to do the > config mentioned, putting the client on the same side > as the router's public IP (since they are both in the > same class C). If you have 1, well you are SOL. > > > > > > > > > --- Carlos Fernandez Sanz > wrote: > > > > > > > > Before you ask: I can't connect this special > > computer to the same place > > I > > > > connect the linux box (which would be the > > obvious solution) because the > > > > carrier expects traffic to come from one WAN IP, > > owned by the linux box. > > > > > > How do they expect you to use any of the other IPs > > in the pool they have > > given > > > you? > > > > I do use them by redirecting traffic from the linux > > box to the destination > > boxes (such as all trafic for public IP 2 goes to > > 192.168.21.2, for > > example). This works fine, *except* in this > > particular case, where any > > NATing is not an option. I need the computer behind > > the linux box to > > actually own the public address, because it signs > > packets with it. > > > > > > > __________________________________ > Do you Yahoo!? > Yahoo! Finance: Get your refund fast by filing online. > http://taxes.yahoo.com/filing.html >