static nat with iptables

static nat with iptables

[zeinali]

[-- Attachment #1: Type: text/plain, Size: 545 bytes --]

Dear sir 

Pls kindly help me

I have a private address like 192.168.20.19/24 and I have a public address
like 213.29.76.153/27 im going to translate (STATIC NAT) my private ip
address to public address (213.29.76.19) with iptables

Meanwhile my router is redhat linux 8.0 and have 2 network adapter like
below

Eth0 192.168.20.1 /24  (connect to private network)

Eth1 213.29.76.154 /27 (connected to internet )

 

Many Thanks&Best Regards

       Behnam Zeinali

         Internet Dept.

     www.maadiran.com <http://www.maadiran.com/> 

 


[-- Attachment #2: Type: text/html, Size: 2986 bytes --]

Re: static nat with iptables

[John Black]

[-- Attachment #1: Type: text/plain, Size: 778 bytes --]

is your eth0 ip address a static ip or dynamic?  if it is static try this:

iptables -A FORWARD -i eth1 -o eth0 -m state --state ESTABLISHED, RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
iptables -A FORWARD -j LOG


iptables -t nat -A POSTROUTING -s 192.168.20.0/24 -o eth1  -j SNAT --to 213.29.76.153


  Dear sir 

  Pls kindly help me

  I have a private address like 192.168.20.19/24 and I have a public address like 213.29.76.153/27 im going to translate (STATIC NAT) my private ip address to public address (213.29.76.19) with iptables

  Meanwhile my router is redhat linux 8.0 and have 2 network adapter like below

  Eth0 192.168.20.1 /24  (connect to private network)

  Eth1 213.29.76.154 /27 (connected to internet )

   


[-- Attachment #2: Type: text/html, Size: 2964 bytes --]

RE: static nat with iptables

[Mussie Gebregziabiher]

Make sure that ip_forwarding is enabled. Not sure if it is enabled by
default. 

cat /etc/sysctl.conf 

# Controls IP packet forwarding
net.ipv4.ip_forward = 1

Good luck!

-MGG

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of John Black
Sent: Sunday, February 22, 2004 10:13 AM
To: netfilter@lists.netfilter.org
Subject: Re: static nat with iptables

is your eth0 ip address a static ip or dynamic?  if it is static try this:
 
iptables -A FORWARD -i eth1 -o eth0 -m state --state ESTABLISHED, RELATED -j
ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
iptables -A FORWARD -j LOG
 
iptables -t nat -A POSTROUTING -s 192.168.20.0/24 -o eth1  -j SNAT --to
213.29.76.153
 
 
Dear sir 
Pls kindly help me
I have a private address like 192.168.20.19/24 and I have a public address
like 213.29.76.153/27 im going to translate (STATIC NAT) my private ip
address to public address (213.29.76.19) with iptables
Meanwhile my router is redhat linux 8.0 and have 2 network adapter like
below
Eth0 192.168.20.1 /24  (connect to private network)
Eth1 213.29.76.154 /27 (connected to internet )
 

RE: static nat with iptables

[John A. Sullivan III]

Perhaps I misunderstood the e-mail but is the address to which you are
NATting on the same network as your public interface? I don't think
213.29.76.154/27 and 213.29.76.19/27 are on the same network - John

On Sun, 2004-02-22 at 15:59, Mussie Gebregziabiher wrote:
> Make sure that ip_forwarding is enabled. Not sure if it is enabled by
> default. 
> 
> cat /etc/sysctl.conf 
> 
> # Controls IP packet forwarding
> net.ipv4.ip_forward = 1
> 
> Good luck!
> 
> -MGG
> 
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org] On Behalf Of John Black
> Sent: Sunday, February 22, 2004 10:13 AM
> To: netfilter@lists.netfilter.org
> Subject: Re: static nat with iptables
> 
> is your eth0 ip address a static ip or dynamic?  if it is static try this:
>  
> iptables -A FORWARD -i eth1 -o eth0 -m state --state ESTABLISHED, RELATED -j
> ACCEPT
> iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
> iptables -A FORWARD -j LOG
>  
> iptables -t nat -A POSTROUTING -s 192.168.20.0/24 -o eth1  -j SNAT --to
> 213.29.76.153
>  
>  
> Dear sir 
> Pls kindly help me
> I have a private address like 192.168.20.19/24 and I have a public address
> like 213.29.76.153/27 im going to translate (STATIC NAT) my private ip
> address to public address (213.29.76.19) with iptables
> Meanwhile my router is redhat linux 8.0 and have 2 network adapter like
> below
> Eth0 192.168.20.1 /24  (connect to private network)
> Eth1 213.29.76.154 /27 (connected to internet )
>  
-- 
Open Source Development Corporation
Financially Sustainable open source development
http://www.opensourcedevelopmentcorp.com