Dnat private network HEEELP!!!
"Luigi Augello" <[email protected]> Wed, 19 Apr 2006 13:36:50 +0100
| Newsgroups | gmane.linux.network.bridge.ebtables.user |
|---|---|
| Message-ID | <[email protected]> |
Hi I have the following situation Two privete subnet (192.168.1.0/24 and 192.168.2.0/24) and a routetr with pubblic address as some as 155.140.1.1. I would use a firewall bridged to dnad the private networks to the router. I Tryed the follow roule but it not work Tanks for attention Luigi enyone could help me! > On Monday 19 January 2004 08:48, Luigi Augello wrote: > > Hi Tanks at all for the reply > > > > I have the following situation > > Different private network (192.168.1.0, 192.162.168.2.0, 192.168.3.0), a > > firewall bridged connected with a router Cisco with a public address. I not > > want assign any address to the firewall NIC. I think can use DNAT and/or > > masquerade but assigning a IP address to the br0 or other interface, but > > without to assign anyone IP to the firewallÂ’s interfaces it is possible to > > have some result > > To DNAT 192.168.1.15 to 192.162.168.15 (f.e.) without the bridge > having an IP address do something like this: > > # echo 1 > /proc/sys/net/ipv4/ip_forward > # ifconfig br0 0.0.0.0 > # route add -net 0.0.0.0 netmask 0.0.0.0 dev br0 > # iptables -t nat -A PREROUTING -d 192.168.1.15 -j DNAT --to-destination > 192.162.168.15 > > The routing table entry is essential, because the bridge-nf code > asks the routing table where to send the DNAT'ed packet. If you want > to do masquerading then, obviously, your bridge will need an IP address. > > cheers, > Bart ------- End of Original Message ------- ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642