Source IP Address

Source IP Address

[mariano]

This is my first message to the list, so Hi ! to everyone.

I need to change the source IP field in certain TCP packets coming out of
one of my machines, for the IP of another of my machines. I think that it
must be done through IPTABLES rules, using SNAT inside postrouting. I am
right ? How should I configure this ? Any suggestions ?

Cheers,
           Mariano

Source IP address

[Bissio]

Hi all,

I've a problem with masq... sometimes when i connect
to pubblic chat or other web services from my lan, i
see my source ip address (private network) listed. I
would see my pubblic ip address listed... i use this
rule:

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o
eth1 -j SNAT --to public.ip.address

and in FORWARD rule:

iptables -A FORWARD -p tcp -i eth0 -o eth1 -s
192.168.3.0/24 --dport 1:1023 -j ACCEPT

iptables -A FORWARD -p tcp -i eth1 -o eth0 -d
192.168.3.0/24 --dport 1024:65535 ! --syn -j ACCEPT

Why my private ip addres (192.168.0.10) is listed
instead my public address???

Thanks
Bissio

______________________________________________________________________
Yahoo! Mail: 6MB di spazio gratuito, 30MB per i tuoi allegati, l'antivirus, il filtro Anti-spam
http://it.yahoo.com/mail_it/foot/?http://it.mail.yahoo.com/

Source IP ADDRESS

[Bissio]

Hi all,

I've a problem with masq... sometimes when i connect
to pubblic chat or other web services from my lan, i
see my source ip address (private network) listed. I
would see my pubblic ip address listed... i use this
rule:

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o
eth1 -j SNAT --to public.ip.address

and in FORWARD rule:

iptables -A FORWARD -p tcp -i eth0 -o eth1 -s
192.168.0.0/24 --dport 1:1023 -j ACCEPT

iptables -A FORWARD -p tcp -i eth1 -o eth0 -d
192.168.0.0/24 --dport 1024:65535 ! --syn -j ACCEPT

Why my private ip addres (192.168.0.10) is listed
instead my public address???

Thanks
Bissio


______________________________________________________________________
Yahoo! Mail: 6MB di spazio gratuito, 30MB per i tuoi allegati, l'antivirus, il filtro Anti-spam
http://it.yahoo.com/mail_it/foot/?http://it.mail.yahoo.com/

RE: Source IP ADDRESS

[George Vieira]

Because the software your using is telling the server your connected to what
your IP is. Much like FTP does and ICQ etc..etc.. which is why special
connection tracking modules are required for those services.

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Bissio
Sent: Saturday, July 05, 2003 2:28 AM
To: netfilter@lists.netfilter.org
Subject: Source IP ADDRESS


Hi all,

I've a problem with masq... sometimes when i connect
to pubblic chat or other web services from my lan, i
see my source ip address (private network) listed. I
would see my pubblic ip address listed... i use this
rule:

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o
eth1 -j SNAT --to public.ip.address

and in FORWARD rule:

iptables -A FORWARD -p tcp -i eth0 -o eth1 -s
192.168.0.0/24 --dport 1:1023 -j ACCEPT

iptables -A FORWARD -p tcp -i eth1 -o eth0 -d
192.168.0.0/24 --dport 1024:65535 ! --syn -j ACCEPT

Why my private ip addres (192.168.0.10) is listed
instead my public address???

Thanks
Bissio


______________________________________________________________________
Yahoo! Mail: 6MB di spazio gratuito, 30MB per i tuoi allegati, l'antivirus,
il filtro Anti-spam
http://it.yahoo.com/mail_it/foot/?http://it.mail.yahoo.com/