From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Garriss Subject: Re: work ip address at home Date: Wed, 22 Oct 2003 11:18:53 -0600 Sender: netfilter-admin@lists.netfilter.org Message-ID: <20031022171853.GA2010@frodo.uglymonkeys.com> References: <20031022112801.V34090@chemsun.chem.umn.edu> Reply-To: mgarriss@uglymonkeys.com Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: <20031022112801.V34090@chemsun.chem.umn.edu> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org On Wed, Oct 22, 2003 at 12:08:26PM -0500, Brent Gregersen wrote: > I need help with the following setup. > > I have one machine at home that gets an IP address (say 1.2.3.4) by DHCP > from an ISP. However, I would like applications on my home machine to > think it has the ip address of my machine at work (say 4.3.2.1). > I would then like to forward a specific port of my home machine to my work > machine, and then forward that to a license server at work. Thus, > application thinks I'm at work, license server thinks Im at work, but Im > really sitting comfortably in my own home. > > Is this possible? Should this be done with netfilter/iptables or should I > be looking at another option? > > If it is possible, I could get some extra work done at home, without > having to use certain graphics intensive programs over a tunneled X > connection to my work machine(which is extreamly slow). > > A diagram: > > LinuxA LinuxB LinuxC > |---------HOME---------| |---Work--| |-Work Server-| > |'4.3.2.1' <--> 1.2.3.4|<--->| 4.3.2.1 |<--->| 4.3.2.2 | > |----------------------| |---------| |-------------| > > > Thanks for any help/suggestions > Some ideas: You can assign multiple ip to one interface like this: ifconfig eth0 $IP1 netmask $NETMASK broadcast $BROADCAST ifconfig eth0:1 $IP2 netmask $NETMASK broadcast $BROADCAST etc... Then you can use SNAT and DNAT to fool with the IP addresses that or coming in and going out Michael Garriss