Re: simple question about ip_forward and NAT routing.

From: Jose Maria Lopez Hernandez (jkerouac_at_bgsec.com)
Date: 03/31/05 

Date: Thu, 31 Mar 2005 10:55:53 +0200

meneg wrote:
> On Wed, 30 Mar 2005 21:36:31 +0200, Jose Maria Lopez Hernandez wrote:
>
> thanks for the response, it's very helpfull.
>
> about this..
>
>
>>any machine that can route traffic to the server
>
>
> forgive my ignorance, I'm only using the functionality to share an
> internet connection with a laptop:p but which are the machines that can
> "route traffic to the server"? that excludes the rest of the internet
> or/and other subnets in the LAN?

I meant the machines that can send traffic to the server (the router),
if a machine it's in the same subnet then it can send traffic to the
router, and if the router has ip_forward activated then it can be
forwarded to other networks connected to the router, for example the
Internet. If the machine is in other subnet usally it can't send traffic
to the router. So: if the machine can connect to the router it can use
it to forward traffic, if it cannot then it cannot use it as a gateway.

Regards. 

-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA
The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                 -- Jack Kerouac, "On the Road"

Relevant Pages

  • Re: Help with IPchains
    ... >> I have to reconfigure a Linux RedHat 6.2 server we bought from another ... We want to continue to use the public web server that is on this ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (comp.security.firewalls)
  • Re: Force uninteractive disk checking on startup
    ... > I am in charge of a small server without a monitor/keyboard. ... > next boot everything will be fine. ... The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. ...
    (comp.os.linux.setup)
  • Re: password
    ... > now I can access my server only via existing VNC. ... bgSEC Seguridad y Consultoria de Sistemas Informaticos ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ...
    (comp.os.linux.security)
  • Re: Intrusion or not
    ... > While connecting by using ssh to my server the server welcomed me with ... bgSEC Seguridad y Consultoria de Sistemas Informaticos ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ...
    (comp.os.linux.networking)
  • Re: Best security configuration and Hosting service question
    ... to send or get the code from the server. ... > hosting deals abroad. ... The only people for me are the mad ones -- the ones who are mad to live, ... the ones who never yawn or say a commonplace thing, but burn, burn, burn ...
    (comp.os.linux.security)
Loading