Re: route/nat

From: Hendrik Greving (hendrik.greving_at_iss.rwth-aachen.de)
Date: 10/26/05

  • Next message: laxman: "Re: linux and windows headache" 
    Date: Wed, 26 Oct 2005 13:07:59 +0200

    Are you sure, that nat is done prior routing? I thought it's different
    because I'm in the POSTROUTING chain using iptables. Currently,
    everything works like that.

    The problem is, currently, the default route goes to interface "vpnlink"
    (interface of vpnc) and I use

    iptables -t nat POSTROUTING [..] -o vpnlink MASQUERADE

    What I'd like to have is, to determine a certain group of ip addresses,
    say 0-127 is applied with nat and are routed to vpnlink, and the rest,
    say 128-254 shuold be routed (and nat) to my DSL (ppp) interface ppp0.

    I'm not very familiar with this stuff, hope everything is correct. Is
    the rule above possible to achieve?

    Regards,
    Hendrik

  • Next message: laxman: "Re: linux and windows headache"

    Relevant Pages

    • Re: setting up nat
      ... eth1 is the wan interface. ... This is my script for nat and firewall. ... iptables are not very difficult. ... > This is where I should put some witty comment. ...
      (Fedora)
    • Re: setting up nat
      ... graphical firewall config tools on FC don't do NAT. ... You should realise that netfilter rules applied using the 'iptables' ... (you can set these up through the standard graphical interface. ...
      (Fedora)
    • Re: setting up nat
      ... eth1 is the wan interface. ... substitute eth1 with your ppp interface ... This is my script for nat and firewall. ... iptables are not very difficult. ...
      (Fedora)
    • iptables - RH 9 - script help (script inserted)
      ... I am trying to get the following iptables script to allow icmp to/from the ... fw internal interface to/from the ext fw interface but no luck so I am ... # rc.firewall - iptables firewall script ... $IPTABLES -F -t nat ...
      (alt.os.linux.redhat)
    • iptables - RH 9 - script help (script inserted)
      ... I am trying to get the following iptables script to allow icmp to/from the ... fw internal interface to/from the ext fw interface but no luck so I am ... # rc.firewall - iptables firewall script ... $IPTABLES -F -t nat ...
      (linux.redhat.install)