* 2 dif. connections separated
@ 2004-07-20 14:13 Pablo Allietti
2004-07-20 14:23 ` Antony Stone
0 siblings, 1 reply; 6+ messages in thread
From: Pablo Allietti @ 2004-07-20 14:13 UTC (permalink / raw)
To: netfilter
hi all, one question
i have 2 router to internet 1 for 200.40.226.65 and other with
200.40.224.65
is possible to divide this connections to make
200.40.226.64 // outgoing traffic
200.40.224.64 // input traffic ???
with iptables ?
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: 2 dif. connections separated
2004-07-20 14:13 2 dif. connections separated Pablo Allietti
@ 2004-07-20 14:23 ` Antony Stone
2004-07-20 14:33 ` Markus
0 siblings, 1 reply; 6+ messages in thread
From: Antony Stone @ 2004-07-20 14:23 UTC (permalink / raw)
To: netfilter
On Tuesday 20 July 2004 3:13 pm, Pablo Allietti wrote:
> i have 2 router to internet 1 for 200.40.226.65 and other with
> 200.40.224.65
>
> is possible to divide this connections to make
>
> 200.40.226.64 // outgoing traffic
>
> 200.40.224.64 // input traffic ???
>
> with iptables ?
Yes. Set the default gateway for the router to point up 200.40.226.64's
link, and use SNAT to set all packets to have source address 200.40.224.65.
Then hope the ISP doesn't do strict ingress / egress filtering... :)
Regards,
Antony.
--
Most people have more than the average number of legs.
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 6+ messages in thread* RE: 2 dif. connections separated
2004-07-20 14:23 ` Antony Stone
@ 2004-07-20 14:33 ` Markus
2004-07-20 14:54 ` Antony Stone
0 siblings, 1 reply; 6+ messages in thread
From: Markus @ 2004-07-20 14:33 UTC (permalink / raw)
To: netfilter
HiHo!
I hope he doesn't want connection tracking, as IMHO he will
only see UNREPLIED connections.
Isn't this a problem for the nat-modules, like ftp?
But than again he probably doesn't need them.
I am just curious..
ciao
markus
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> Sent: Dienstag, 20. Juli 2004 16:24
> To: netfilter@lists.netfilter.org
> Subject: Re: 2 dif. connections separated
>
>
> On Tuesday 20 July 2004 3:13 pm, Pablo Allietti wrote:
>
> > i have 2 router to internet 1 for 200.40.226.65 and other with
> > 200.40.224.65
> >
> > is possible to divide this connections to make
> >
> > 200.40.226.64 // outgoing traffic
> >
> > 200.40.224.64 // input traffic ???
> >
> > with iptables ?
>
> Yes. Set the default gateway for the router to point up 200.40.226.64's
> link, and use SNAT to set all packets to have source address 200.40.224.65.
>
> Then hope the ISP doesn't do strict ingress / egress filtering... :)
>
> Regards,
>
> Antony.
>
> --
> Most people have more than the average number of legs.
>
> Please reply to the list;
> please don't CC me.
>
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: 2 dif. connections separated
2004-07-20 14:33 ` Markus
@ 2004-07-20 14:54 ` Antony Stone
2004-07-20 15:03 ` Markus
2004-07-20 15:04 ` Markus
0 siblings, 2 replies; 6+ messages in thread
From: Antony Stone @ 2004-07-20 14:54 UTC (permalink / raw)
To: netfilter
On Tuesday 20 July 2004 3:33 pm, Markus wrote:
> HiHo!
>
> I hope he doesn't want connection tracking, as IMHO he will
> only see UNREPLIED connections.
Why? Netfilter will see the packets go out, adn it will see the replies come
back in. It won't care how they got to/from the Internet.
> Isn't this a problem for the nat-modules, like ftp?
I think they should work exactly as they do for a single connection setup.
If he had two separate netfilter machines, now *that* would be difficult to
handle...
Regards,
Antony.
> > -----Original Message-----
> > From: netfilter-admin@lists.netfilter.org
> > [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> > Sent: Dienstag, 20. Juli 2004 16:24
> > To: netfilter@lists.netfilter.org
> > Subject: Re: 2 dif. connections separated
> >
> > On Tuesday 20 July 2004 3:13 pm, Pablo Allietti wrote:
> > > i have 2 router to internet 1 for 200.40.226.65 and other with
> > > 200.40.224.65
> > >
> > > is possible to divide this connections to make
> > >
> > > 200.40.226.64 // outgoing traffic
> > >
> > > 200.40.224.64 // input traffic ???
> > >
> > > with iptables ?
> >
> > Yes. Set the default gateway for the router to point up 200.40.226.64's
> > link, and use SNAT to set all packets to have source address
> > 200.40.224.65.
> >
> > Then hope the ISP doesn't do strict ingress / egress filtering... :)
> >
> > Regards,
> >
> > Antony.
> >
> > --
> > Most people have more than the average number of legs.
> >
> > Please reply to the
> > list; please don't CC me.
--
The lottery is a tax for people who can't do maths.
Please reply to the list;
please don't CC me.
^ permalink raw reply [flat|nested] 6+ messages in thread* RE: 2 dif. connections separated
2004-07-20 14:54 ` Antony Stone
@ 2004-07-20 15:03 ` Markus
2004-07-20 15:04 ` Markus
1 sibling, 0 replies; 6+ messages in thread
From: Markus @ 2004-07-20 15:03 UTC (permalink / raw)
To: netfilter
HiHo!
I think he has two routers, aka two different machines ;)
ciao
markus
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> Sent: Dienstag, 20. Juli 2004 16:55
> To: netfilter@lists.netfilter.org
> Subject: Re: 2 dif. connections separated
>
>
> On Tuesday 20 July 2004 3:33 pm, Markus wrote:
>
> > HiHo!
> >
> > I hope he doesn't want connection tracking, as IMHO he will
> > only see UNREPLIED connections.
>
> Why? Netfilter will see the packets go out, adn it will see the replies come
> back in. It won't care how they got to/from the Internet.
>
> > Isn't this a problem for the nat-modules, like ftp?
>
> I think they should work exactly as they do for a single connection setup.
>
> If he had two separate netfilter machines, now *that* would be difficult to
> handle...
>
> Regards,
>
> Antony.
>
> > > -----Original Message-----
> > > From: netfilter-admin@lists.netfilter.org
> > > [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> > > Sent: Dienstag, 20. Juli 2004 16:24
> > > To: netfilter@lists.netfilter.org
> > > Subject: Re: 2 dif. connections separated
> > >
> > > On Tuesday 20 July 2004 3:13 pm, Pablo Allietti wrote:
> > > > i have 2 router to internet 1 for 200.40.226.65 and other with
> > > > 200.40.224.65
> > > >
> > > > is possible to divide this connections to make
> > > >
> > > > 200.40.226.64 // outgoing traffic
> > > >
> > > > 200.40.224.64 // input traffic ???
> > > >
> > > > with iptables ?
> > >
> > > Yes. Set the default gateway for the router to point up 200.40.226.64's
> > > link, and use SNAT to set all packets to have source address
> > > 200.40.224.65.
> > >
> > > Then hope the ISP doesn't do strict ingress / egress filtering... :)
> > >
> > > Regards,
> > >
> > > Antony.
> > >
> > > --
> > > Most people have more than the average number of legs.
> > >
> > > Please reply to the
> > > list; please don't CC me.
>
> --
> The lottery is a tax for people who can't do maths.
>
> Please reply to the list;
> please don't CC me.
>
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* RE: 2 dif. connections separated
2004-07-20 14:54 ` Antony Stone
2004-07-20 15:03 ` Markus
@ 2004-07-20 15:04 ` Markus
1 sibling, 0 replies; 6+ messages in thread
From: Markus @ 2004-07-20 15:04 UTC (permalink / raw)
To: netfilter
HiHo!
Oups.. two routers doesn't mean two firewall..
my fault...
ciao
markus
> -----Original Message-----
> From: netfilter-admin@lists.netfilter.org
> [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> Sent: Dienstag, 20. Juli 2004 16:55
> To: netfilter@lists.netfilter.org
> Subject: Re: 2 dif. connections separated
>
>
> On Tuesday 20 July 2004 3:33 pm, Markus wrote:
>
> > HiHo!
> >
> > I hope he doesn't want connection tracking, as IMHO he will
> > only see UNREPLIED connections.
>
> Why? Netfilter will see the packets go out, adn it will see the replies come
> back in. It won't care how they got to/from the Internet.
>
> > Isn't this a problem for the nat-modules, like ftp?
>
> I think they should work exactly as they do for a single connection setup.
>
> If he had two separate netfilter machines, now *that* would be difficult to
> handle...
>
> Regards,
>
> Antony.
>
> > > -----Original Message-----
> > > From: netfilter-admin@lists.netfilter.org
> > > [mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Antony Stone
> > > Sent: Dienstag, 20. Juli 2004 16:24
> > > To: netfilter@lists.netfilter.org
> > > Subject: Re: 2 dif. connections separated
> > >
> > > On Tuesday 20 July 2004 3:13 pm, Pablo Allietti wrote:
> > > > i have 2 router to internet 1 for 200.40.226.65 and other with
> > > > 200.40.224.65
> > > >
> > > > is possible to divide this connections to make
> > > >
> > > > 200.40.226.64 // outgoing traffic
> > > >
> > > > 200.40.224.64 // input traffic ???
> > > >
> > > > with iptables ?
> > >
> > > Yes. Set the default gateway for the router to point up 200.40.226.64's
> > > link, and use SNAT to set all packets to have source address
> > > 200.40.224.65.
> > >
> > > Then hope the ISP doesn't do strict ingress / egress filtering... :)
> > >
> > > Regards,
> > >
> > > Antony.
> > >
> > > --
> > > Most people have more than the average number of legs.
> > >
> > > Please reply to the
> > > list; please don't CC me.
>
> --
> The lottery is a tax for people who can't do maths.
>
> Please reply to the list;
> please don't CC me.
>
>
>
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2004-07-20 15:04 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-07-20 14:13 2 dif. connections separated Pablo Allietti
2004-07-20 14:23 ` Antony Stone
2004-07-20 14:33 ` Markus
2004-07-20 14:54 ` Antony Stone
2004-07-20 15:03 ` Markus
2004-07-20 15:04 ` Markus
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox