Dnat private network HEEELP!!!

"Luigi Augello" <[email protected]> Wed, 19 Apr 2006 13:36:50 +0100
Newsgroups gmane.linux.network.bridge.ebtables.user
Message-ID <[email protected]>
Hi I have the following situation
Two privete subnet (192.168.1.0/24 and 192.168.2.0/24) and a routetr with 
pubblic address as some as 155.140.1.1. I would use a firewall bridged to 
dnad the private networks to the router. I Tryed the follow roule but it not 
work
Tanks for attention
Luigi
enyone could help me!

> On Monday 19 January 2004 08:48, Luigi Augello wrote:
> > Hi Tanks at all for the reply
> >
> > I have the following situation
> > Different private network (192.168.1.0, 192.162.168.2.0, 192.168.3.0), a
> > firewall bridged connected with a router Cisco with a public address. I 
not
> > want assign any address to the firewall NIC. I think can use DNAT and/or
> > masquerade but assigning a IP address to the br0 or other interface, but
> > without to assign anyone IP to the firewallÂ’s interfaces it is possible 
to
> > have some result
> 
> To DNAT 192.168.1.15 to 192.162.168.15 (f.e.) without the bridge 
> having an IP address do something like this:
> 
> # echo 1 > /proc/sys/net/ipv4/ip_forward
> # ifconfig br0 0.0.0.0
> # route add -net 0.0.0.0 netmask 0.0.0.0 dev br0
> # iptables -t nat -A PREROUTING -d 192.168.1.15 -j DNAT --to-destination 
> 192.162.168.15
> 
> The routing table entry is essential, because the bridge-nf code 
> asks the routing table where to send the DNAT'ed packet. If you want 
> to do masquerading then, obviously, your bridge will need an IP address.
> 
> cheers,
> Bart
------- End of Original Message -------



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642