From mboxrd@z Thu Jan 1 00:00:00 1970 From: "primero@hdr-roma.it" Subject: Re: NATTING for a whole network. Date: Fri, 10 Dec 2004 19:58:39 +0100 Message-ID: <41B9F1DF.4030102@hdr-roma.it> References: <4D7EBAB4CCB6DB4AB7EE598E9ED186950474D69B@asusfl45cex08.us-fl.cards.citicorp.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <4D7EBAB4CCB6DB4AB7EE598E9ED186950474D69B@asusfl45cex08.us-fl.cards.citicorp.com> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: "Irvin, Michael Thad" Cc: "'netfilter@lists.netfilter.org'" Irvin, Michael Thad wrote: >I'm kinda new at this iptables thing. I've been running into a problem with >trying to NAT for a class C subnetted class A network...i.e. 10.168.1.0/24. >The syntax I've been using is as follows -- $ipt -t nat -A POSTROUTING -o >$outside -j SNAT -to-source $lan, with the variable $lan = "10.168.1.0/24". >Everytime I've ran the script I get the following error Bad IP Address. Can anyone please help me with the proper syntax to make >this work? I've tried various options such the one above, also including >the whole subnetmask and playing around with different delimitation >options, nothing seems to work. > > > >Michael "Thad" Irvin >Lead Analyst - Internet Engineering >Citibank Cards Technology >904.954.2213 >michael.irvin@citicorp.com > > > > sorry , reading again the message made me see that i've not understood the problem cause you want to NAT to a complete lan address;) ... i should need some rest maybe :) byez