Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Antony Stone <Antony@Soft-Solutions.co.uk>
To: netfilter@lists.samba.org
Subject: Re: NetBIOS browsing across subnets
Date: Fri, 5 Jul 2002 20:15:51 +0100	[thread overview]
Message-ID: <20020705191553.UXHV4119.mta06-svc.ntlworld.com@there> (raw)
In-Reply-To: <02bd01c22453$80863600$3200a8c0@jungle.funkybadger.org>

Suppose you have two subnets 192.168.1.0/24 and 192.168.2.0/24 joined by a 
netfilter router, and you want to browse Windows NetBios shares on the 
192.168.2.0 subnet from a client machine on the 192.168.1.0 subnet.

Suppose you put the following rules on the router:

iptables -A PREROUTING -t nat -d 192.168.1.255 -j DNAT --to 192.168.2.255

iptables -A FORWARD -j ACCEPT

Would this forward a broadcast packet on the 192.168.1.0 network to the 
192.168.2.0 network ?   Presumably the reply to such a broadcast is sent back 
to the originating IP, so that would go back across the router perfectly okay.

If you needed to transfer broadcasts from both networks to each other you'd 
have to be a bit clever with the iptables rules, so as not to translate a 
packet and then immediately translate it straight back again, but it could 
still be done.

Unfortunately amongst all my Linux machines I don't have enough Windows 
computers here to try this idea out :-)   Maybe someone else can comment on 
it from experience, or try and tell us what happens ?

 

Antony.


  reply	other threads:[~2002-07-05 19:15 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-07-04 20:44 NetBIOS browsing across subnets John Jones
2002-07-04 20:46 ` Antony Stone
2002-07-04 21:52   ` Stewart Thompson
2002-07-05  0:37   ` Ron Gedye
2002-07-05 18:34 ` Nathan Cassano
2002-07-05 18:40   ` Adam D. Barratt
2002-07-05 19:15     ` Antony Stone [this message]
  -- strict thread matches above, loose matches on Subject: below --
2002-07-04 22:51 George Vieira
2002-07-05  0:48 George Vieira
2002-07-05  2:42 ` Michael
2002-07-05  1:49 George Vieira
2002-07-05  3:21 ` Michael
2002-07-05  2:30 George Vieira

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20020705191553.UXHV4119.mta06-svc.ntlworld.com@there \
    --to=antony@soft-solutions.co.uk \
    --cc=netfilter@lists.samba.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox