* Nat before routing decision
@ 2004-11-15 11:44 thomas.elsaesser
2004-11-15 14:51 ` Jason Opperisano
0 siblings, 1 reply; 3+ messages in thread
From: thomas.elsaesser @ 2004-11-15 11:44 UTC (permalink / raw)
To: netfilter
Dear all,
I need src nat before the packet go to the routing decision.
How can i do it.
Kind Regards
Thomas
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Nat before routing decision
2004-11-15 11:44 Nat before routing decision thomas.elsaesser
@ 2004-11-15 14:51 ` Jason Opperisano
2004-11-15 15:17 ` John A. Sullivan III
0 siblings, 1 reply; 3+ messages in thread
From: Jason Opperisano @ 2004-11-15 14:51 UTC (permalink / raw)
To: netfilter
On Mon, 2004-11-15 at 06:44, thomas.elsaesser@lhsystems.com wrote:
> Dear all,
>
> I need src nat before the packet go to the routing decision.
> How can i do it.
>
> Kind Regards
>
> Thomas
well, SNAT is only valid in POSTROUTING of the NAT table. if you need
to apply alternate routing to a packet and translate it's source, you
can follow the theory of:
1) mark packet in PREROUTING of MANGLE
2) route based on MARK
3) SNAT packet in POSTROUTING of NAT
-j
--
"Another day, another box of stolen pens."
--The Simpsons
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Nat before routing decision
2004-11-15 14:51 ` Jason Opperisano
@ 2004-11-15 15:17 ` John A. Sullivan III
0 siblings, 0 replies; 3+ messages in thread
From: John A. Sullivan III @ 2004-11-15 15:17 UTC (permalink / raw)
To: Jason Opperisano; +Cc: Netfilter users list
On Mon, 2004-11-15 at 09:51, Jason Opperisano wrote:
> On Mon, 2004-11-15 at 06:44, thomas.elsaesser@lhsystems.com wrote:
> > Dear all,
> >
> > I need src nat before the packet go to the routing decision.
> > How can i do it.
> >
> > Kind Regards
> >
> > Thomas
>
> well, SNAT is only valid in POSTROUTING of the NAT table. if you need
> to apply alternate routing to a packet and translate it's source, you
> can follow the theory of:
>
> 1) mark packet in PREROUTING of MANGLE
> 2) route based on MARK
> 3) SNAT packet in POSTROUTING of NAT
<snip>
It has been a long time since I worked with it so I don't remember the
details but is the stateless NAT in iproute2 done before routing
decisions? - John
--
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2004-11-15 15:17 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-11-15 11:44 Nat before routing decision thomas.elsaesser
2004-11-15 14:51 ` Jason Opperisano
2004-11-15 15:17 ` John A. Sullivan III
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox