Re: ipfwadm problems

Frank Schaefer (frank.schafer@setuza.cz)
23 May 2002 09:33:59 +0200


On Wed, 2002-05-22 at 21:51, Kirk wrote:
> Does iptables have or allow IP Masqurading? This is really what I'm trying
> to do as I have a network behind my linux server (acting as a router) and
> need to forward packets from 192.168.0.x to my WAN port on the same Linux
> server. I had this working with ipchains until the upgrade to 2.4.18.
>

Yes, You have to use the SNAT/DNAT targets in the PREROUTING/POSTROUTING
chains of the NAT table. Recognize, that IP Masquerade is nothing else
than a subset of Network Adress Translation (NAT).

Regards
Frank

BTW: A collegue of mine has the problem, that a host has 4 NICs; 2 to
the LAN and 2 to the internet. Packets coming from LAN NIC 1 shall be
forwarded through WWW NIC 1 and Packets from LAN NIC 2 through WWW NIC
2. Is there any way to perform this on a 2.2.x kernel using ipchains?
And even whorse; They need destination NAT in the reverse manner of the
above.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/