Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "hare ram" <hareram@sol.net.in>
To: netfilter@lists.netfilter.org
Subject: Problem With NAT to NAT with IPTABLES
Date: Mon, 28 Oct 2002 12:11:36 +0530	[thread overview]
Message-ID: <00ca01c27e4d$0fd20980$13fcc5cb@nextto> (raw)
In-Reply-To: 200210280048.01995.netfilter@newkirk.us

Hi all

i have DSL 2MB connection with my provider
he is authenticating and giving me 2MB Bandwidth
i am using for my internal office purpose

i have zyxel ADSL modem which is is Doing NAT
since i have lot of corporate users, i want to manage the bandwidth, so i
added another Redhat Linux box in between user and Zyxel ADSL router with 2
NIC
the set up look like below


Corporate users---NIC1--NIC2--ADSL LAN--ADLS WAN--UPLink/DownLink provider


the problem is iam getting very poor response when i use iptables NAT to NAT
configuration
the configuration is like this

Internal Users are using  192.168.2.5 to 192.168.2.200 subnet is
255.255.255.0
Internal user Gateway is (NIC1) 192.168.2.1

NIC2 IP address is 192.168.4.2 with the subnet if 255.255.255.0
ADSLLAN ip address is 192.168.4.1 with the Subnet if 255.255.255.0
NIC2 and ADSLLAN is connected with Cross cable

ADSL WAN ip address is Dynamic

This is what my present configuration of LAN
but iam getting very poor responce of browsing, when iam doing any of the PC
from corporate users

when i remove the Linux box , iam getting good speed, but its sharing the
bandwidth that, any one can pull 2MB, iam not able to monitor

in the Redhat Linux 7.3 iam running Squid and Transparent proxy, with
Iptables prerouting from 80 port to 3128
its able to serve the request but very slow responce, never gone yet to CBQ.

I have another Setup in another Office

Corporate users---NIC1--NIC2--Cisco LAN-- Cisco WAN--UPLink/DownLink
provider

here iam getting Cisco LAN is Public IP address, and My NIC2 also Public
Address
here my above setup working with any hassels

can any suggest me what is wrong, any recomendation on the above setup
where NAT to NAT giving problem

thanks in advance
hare






  reply	other threads:[~2002-10-28  6:41 UTC|newest]

Thread overview: 14+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-10-27 18:03 Packet chain traversals Joel Newkirk
2002-10-27 18:50 ` Oskar Andreasson
2002-10-27 19:21   ` Joel Newkirk
2002-10-27 21:23     ` Oskar Andreasson
2002-10-28  5:48       ` Joel Newkirk
2002-10-28  6:41         ` hare ram [this message]
2002-10-27 18:52 ` Oskar Andreasson
2002-10-28  8:32   ` Antony Stone
2002-10-28 21:18     ` Oskar Andreasson
2002-10-28 21:37       ` Antony Stone
2002-10-30 16:11         ` Matthew G. Marsh
2002-10-30 17:22           ` Antony Stone
2002-10-31 16:55             ` Matthew G. Marsh
2002-11-01 22:48             ` Joel Newkirk

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='00ca01c27e4d$0fd20980$13fcc5cb@nextto' \
    --to=hareram@sol.net.in \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox