router w/ iptables using nat and routing

router w/ iptables using nat and routing

[Bob Iverson]

i am setting up a router using rh8.0

it has 3 interfaces, eth0 66.119.211.74/30, eth1 64.146.167.254/27, eth1 
10.10.1.1/8

currently i use two routers to accomplish my need. that is to route from 
eht0 my isp link to eth1 my routable subnet, containing email, dns, vpn and 
web sites. and do NAT on eth1 to 10.10.1.1-10.10.1.255 for my customers who 
do not need routable addresses.
i can make one or the other work, nat 10.10.1.1 to the internet. or route 
64.x.x.x to the internet. but i have not been able to get both to work.

currently i have a router doing 66.119.211.74 to 64.146.167.254. and a 
router doing 10.10.1.1 to 64.146.167.228 w/NAT. then they are connected on 
the 64. network to allow access to dns, email and web.

is it possible to run one machine with 3 card to accomplish this task?

-- 
Bob Iverson
SPECTRUM COMMUNICATIONS
765-7773
bob@spectrum-comm.com

RE: router w/ iptables using nat and routing

[Stuart J. Browne]

eth0 = Internet
eth1 = non-nat
eth2 = nat stuff

route add default eth0

iptables -t nat -I POSTROUTING -j SNAT -s 10.0.0.0/8 -o eth0 --to
66.119.211.74

If you need NAT from the 10's to the 64's, then

iptables -t nat -I POSTROUTING -j SNAT -s 10.0.0.0/8 -o eth1 --to
64.146.167.254

Shouldn't really need anything more complex than that.

bkx

>-----Original Message-----
>From: netfilter-admin@lists.netfilter.org 
>[mailto:netfilter-admin@lists.netfilter.org] On Behalf Of Bob Iverson
>Sent: Wednesday, 22 October 2003 10:29
>To: netfilter@lists.netfilter.org
>Subject: router w/ iptables using nat and routing
>
>
>i am setting up a router using rh8.0
>
>it has 3 interfaces, eth0 66.119.211.74/30, eth1 
>64.146.167.254/27, eth1 
>10.10.1.1/8
>
>currently i use two routers to accomplish my need. that is to 
>route from 
>eht0 my isp link to eth1 my routable subnet, containing email, 
>dns, vpn and 
>web sites. and do NAT on eth1 to 10.10.1.1-10.10.1.255 for my 
>customers who 
>do not need routable addresses.
>i can make one or the other work, nat 10.10.1.1 to the 
>internet. or route 
>64.x.x.x to the internet. but i have not been able to get both to work.
>
>currently i have a router doing 66.119.211.74 to 64.146.167.254. and a 
>router doing 10.10.1.1 to 64.146.167.228 w/NAT. then they are 
>connected on 
>the 64. network to allow access to dns, email and web.
>
>is it possible to run one machine with 3 card to accomplish this task?
>
>-- 
>Bob Iverson
>SPECTRUM COMMUNICATIONS
>765-7773
>bob@spectrum-comm.com
>