Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Jose Luis Faria <jose@di.uminho.pt>
To: netfilter@lists.netfilter.org
Subject: forward for some IPs and SNAT the rest
Date: Tue, 16 Mar 2004 15:58:46 +0000	[thread overview]
Message-ID: <40572436.9080308@di.uminho.pt> (raw)

[-- Attachment #1: Type: text/plain, Size: 1343 bytes --]

Hello,

I have a firewall inside my organization, but I want to preserve some 
source IPs,
and the rest must be SNATed:


host 1 - 192.168.0.1 ------------\
                                  \
                                   \ +--------------+
                                    \|  firewall    | 193.137.1.1 (ex.)    
host 2 - 192.168.0.2 ----------------|  with        |---------------> 
internet
                                    /|  iptables    |       |
                                   / +--------------+       |
                                  /  /                      | internal
host 3 - 192.168.0.3 ------------/  /                       |  routing
                                   /                        |
                                  /                         v
host 4 - 192.168.0.4 ------------/                        license server

the host 1 and host 2 must arrive to the license server with the original IP( 192.168.0.1/2) and the others host must be translated with SNAT into 193.137.1.1.


some help?


P.S: Now every hosts use the SNAT for all, but I want to exclude some of them.
-- 

   :)  cumprimentos
------------------------------------
         Jose Luis Faria
         Universidade do Minho
   /\    Escola de Engenharia
  /\/\   Departamento Informatica
         http://www.di.uminho.pt/~jose


[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 2468 bytes --]

             reply	other threads:[~2004-03-16 15:58 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-03-16 15:58 Jose Luis Faria [this message]
2004-03-16 16:09 ` forward for some IPs and SNAT the rest Antony Stone

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=40572436.9080308@di.uminho.pt \
    --to=jose@di.uminho.pt \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox