Linux Netfilter discussions
 help / color / mirror / Atom feed
From: eduardg@mat.upc.es
To: Antony@Soft-Solutions.co.uk, netfilter@lists.samba.org
Subject: Re: Can iptables do this?
Date: Mon, 20 May 2002 19:05:32 +0200 (CEST)	[thread overview]
Message-ID: <1021914332.3ce92cdc59eba@wmail-mat.upc.es> (raw)
In-Reply-To: <200205201336.OAA14181@slate.rockstone.co.uk>

Hi, first of all thank you for your time

Missatge citat per: Antony Stone <Antony@Soft-Solutions.co.uk>:

> On Monday 20 May 2002 1:03 pm, Eduardo GARCIA wrote:
> 
> > For example my network is 1.2.3.0 and I want that a host with an IP
> address
> > 10.9.8.7 can navigate. First of all, the host will send arp request to
> find
> > the MAC of its DNS server (I'll have to redirect it to my DNS), then
> it
> > will look for its default gateway, etc (I can't work with mobile IP
> nor
> > change any host configuration).
> >
> > Not any host is allowed to do this, only hosts with known MACs.

Here comes (I belive) iptables



> 
> Sounds like you want BOOTP / DHCP ?

No, this way the network configuration dynamically changes.


> 
> I don't quite see where IPtables comes into this.... ?


I have to translate the ip of the host, but the problem comes when the host 
tries to find its DNS, it first has to send an ARP request that must be 
responsed by somebody on my network. Is possible to mangle an arp request to 
change dest ip?


> 
> 
> 
> Antony.
> 
> 


       reply	other threads:[~2002-05-20 17:05 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <OF48E1B4A6.4F38281F-ONC1256BBF.004241A8-C1256BBF.004241D4@upc.es>
     [not found] ` <200205201336.OAA14181@slate.rockstone.co.uk>
2002-05-20 17:05   ` eduardg [this message]
2004-01-02 17:19 public ip on LAN Amit Pasari
2004-01-02 17:27 ` Fabien LE BLEVEC
2004-01-02 18:30   ` Craig Steadman
2004-01-02 18:46     ` Michael Gale
2004-01-02 19:07       ` Can iptables do this ? Ramoni
2004-01-02 19:19         ` Antony Stone
     [not found] <OFE9A4EDE9.418F3246-ONC1256BC0.0035D17B-C1256BC0.0035D196@upc.es>
     [not found] ` <200205211157.MAA18294@slate.rockstone.co.uk>
2002-05-21 12:27   ` can iptables do this? Sven Koch
2002-06-13 17:25     ` Antony Stone
     [not found]   ` <3CEA8069.EA2F5F84@spamless.genwax.com>
     [not found]     ` <200205211742.SAA19742@slate.rockstone.co.uk>
2002-05-21 23:48       ` Edu
  -- strict thread matches above, loose matches on Subject: below --
2002-05-20 10:23 Can " eduardg

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1021914332.3ce92cdc59eba@wmail-mat.upc.es \
    --to=eduardg@mat.upc.es \
    --cc=Antony@Soft-Solutions.co.uk \
    --cc=netfilter@lists.samba.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox