From: "Jet" <yenjet.chan@eglobal.com.my>
To: netfilter@lists.samba.org
Subject: IP alias and NAT
Date: Mon, 27 Jan 2003 19:31:01 +0800 [thread overview]
Message-ID: <001e01c2c5f8$bc5d7d40$0bc8c80a@dolphin> (raw)
Greeting all,
I just got a strange setup on a client site.
It is a standard network setup, from Internet-> router->firewall->DMZ
The firewall is doing NAT for the servers at DMZ.
The strange part is they always do a IP alias at the firewall external
interface when creating a NAT rule (either preroute or post-route).
If I remove the ip alias, then the connection will never work.
My question is, is this the right setup?
To my understanding, it should be just doing NAT with pre-route or
post-route, and then creating the policy using FORWARD chain.
Using IP alias never seems make sence to me here (what if there is 1000
servers in DMZ).
Anyone have any idea here?
- Jet
Security Analyst
next reply other threads:[~2003-01-27 11:31 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-01-27 11:31 Jet [this message]
2003-01-27 13:08 ` IP alias and NAT Cedric Blancher
2003-01-29 4:04 ` Jet
2003-01-30 2:04 ` Joel Newkirk
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='001e01c2c5f8$bc5d7d40$0bc8c80a@dolphin' \
--to=yenjet.chan@eglobal.com.my \
--cc=netfilter@lists.samba.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox