In computer networking, Network Address Translation (NAT) is the process of modifying IP address information in IPv4 headers while in transit across a traffic routing device.

learn more… | top users | synonyms

1
vote
0answers
18 views

Can not reach local DNS server for local dot domain subzones because firewall returns gateway IP

I have pfSense inline between my cable modem and my switch, on pfSense I have a NAT port forward on 53 to my local DNS server which I want to serve local subzones to the LAN with. Right now when I dig ...
1
vote
1answer
24 views

linux nat different rules

eth0 (192.168.1.0/24) --> wan eth2 (192.168.10.0/24) --> lan0 I use these rules to enable NAT on my linux gateway: iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -A FORWARD -i ...
0
votes
0answers
55 views

CentOS as home network router: IPTables Port Forwarding failure

I have currently set up a home server with a CentOS 6.6 installation on it. The server has two NIC interfaces which I'm using it as my router and DHCP server. Here's a diagram showing the network ...
1
vote
1answer
30 views

Does NAT allow accessing internal network (or router's local interface) from outisde by default?

I am using older SOHO router wl500gP (it is v1 but I think this is not important) with custom Oleg firmware. My topology looks like this: 192.168.3.3 192.168.3.2 NAT 192.168.2.1 ...
1
vote
1answer
42 views

How to enable ping between machines connected in two interfaces?

I have a linux board with two ethernet interfaces as mentioned below. eth0 connected to another linux machine (ad-hoc) eth0 on board 191.168.1.2 connected to Linux machine 192.168.1.3 eth1 on board ...
0
votes
2answers
64 views

Enable ssh host to guest & guest Internet on CentOS 7 guest with VirtualBox

I have 2 CentOS 7 guests running in VirtualBox on a Ubuntu host. I want to be able to: Connect using ssh from host to guest Download/install packages from the Internet on the guest. I currently ...
1
vote
0answers
20 views

Shorewall configuration : providers and LAN

Hi all and thanks in advance for the answers. Currently, I have different providers configured in shorewall. I'll will probably have to change one of them. The problem is I won't have any Public IP ...
0
votes
0answers
56 views

iptables - hairpin NAT dual WAN

Here is my lab Client LAN: 192.168.150.95 Gateway: 192.168.150.1 RDP Server LAN: 192.168.150.2 Gateway: 192.168.150.1 Linux Router WAN: 177.129.XXX.XXX Gateway: 177.129.XXX.XXX LAN: 192.168.150.1 ...
0
votes
1answer
25 views

Nat with saving real client IP

I have this schema: Client -> NAT server -> Game server On NAT server I have the following rules: iptables -A FORWARD -d $MC_IP -p tcp --dport 25550:25580 -j ACCEPT iptables -t nat -A PREROUTING -d ...
1
vote
1answer
28 views

Need help selecting networking option in VMware workstation

I am a complete noob in this area, so I really need help and advice. I am trying to setup something like a VPS on my computer. What I will do is: 1) Install vmware workstation on my computer 2) ...
1
vote
1answer
52 views

NAT External IP to local server using iptables

I have a adsl connection with static IP (lets say 1.1.1.1). My debian firewall connects Internet with ppp and IP is assigned to firewall directly; ppp0 Link encap:Point-to-Point Protocol inet ...
1
vote
0answers
25 views

Outgoing masquerade address changes after adding a second interface to the bridge

In fact I have the following configuration: extrouter(192.168.1.1) <- wifi -> [eth2 (192.168.1.11) Centos 6/6 based host br0 (172.22.5.254)] br0 contains two tap interfaces (tap0/172.22.5.1 ...
0
votes
1answer
80 views

SSH to a virtual machine

I recently installed a Linux (Mint 17) virtual Machine on a Windows 7 PC. In order to be able to SSH to this virtual machine, I had to define a few rules and redirect ports as explained in other posts ...
1
vote
1answer
85 views

Redirect traffic destined for IP and port

I have a program that wants to connect to 1.2.3.4 on port 5678, but it can't because the port is blocked on our network. However, I do have an SSH tunnel set up that redirects localhost:5678 to ...
0
votes
0answers
78 views

[Solved]No problem connected by filezilla, but cannot get list when connected by linux CLI client

I built FTP server by VSFTPD, on Raspberry pi, and Inside NAT. Surely set port-forwarding and, it perfectly functional when I connected by filezilla. But, I can't execute LIST(dir) when I connected ...
3
votes
1answer
32 views

How to create an internal multipath gateway

Basically trying to bend bridging and NATing to my will with quite a unique project. I've simplified what I'm doing below (VM=Kali virtual machine for testing): ZoneX's are network namespaces, ...
2
votes
0answers
27 views

guest owns NIC, host and other guests access via NAT

OK, this is a bit complicated. On my host OS, when Guest1 is running, I want any incoming connections to go to guest1. So from the outside the system looks like guest1. But I still need to access ...
1
vote
1answer
46 views

Observing ping replies under DNAT

I'm confused while trying to understand the DNAT mechanism under below circumstance. My understanding: DNAT = Destination Network Address Translation: Functionality which translates the destination ...
2
votes
1answer
34 views

(S/D)NAT over NF hooks

Could someone help on explaining the advantage of iptables NAT over the netfilter hooks. Say suppose, instead of using NAT if we create custom kernel module to bind handler with netfilter for PRE/POST ...
0
votes
0answers
176 views

Slackware internet gateway with iptables / poor browsing performance

I am running a dual core headless computer as internet gateway via pppoe with two NICs. eth1 (internet interface) no ip, no dhcp eth0 (LAN interface) - 192.168.0.100 static ppp0 - dynamic ip ...
1
vote
0answers
79 views

Use VirtualBox to access site on host from guest? the host and guest is linux

I'm running VirtualBox on a Ubuntu (host), the VM I’m using is fedora (guest). VirtualBox is setup to use the NAT network adapter, and I'm able to get to the internet. I use Port Forwarding to access ...
0
votes
1answer
40 views

Understanding NAT concepts

I began learning networking on Linux, and I am looking for a way to associate a particular IP to a particular MAC address (i.e. a way to edit the NAT table?). Actually I am trying to assign some IPs ...
1
vote
1answer
26 views

Network translation, one to one, not one to many

Desired scenario: a small subnetwork of Linux machines, all accessible through another Linux machine (acting as an IP router). These machines would be pre-configured with addresses on a private ...
1
vote
0answers
35 views

Why isn't my nat-to not applied to the pass out rule?

I've a strange problem concerning NAT on an OpenBSD-Box with pf. I've cut down my pf.conf to the following lines: extif = "pcn0" intif = "pcn1" block drop all #Allow all incoming traffic from intif ...
2
votes
3answers
154 views

Copying a file using SSH over a tunnel with cert forwarding

I need to find a way to copy files from mymachine to a server priv-server sitting on a private NATted network via a server pub-server with a public IP. The behind-NAT machine priv-server only has ...
2
votes
3answers
121 views

Bridge/Router with custom logic

I've a Linux box with 3 network adapaters, which I'd like to configure as follow: Adapter A is connected to computer A Adapter B is connected to computer B Adapter C is connected to the Internet. ...
0
votes
1answer
203 views

iptables NAT on Debian openvz

So i want to create a nat rule for an openVPN server. After getting trouble with the TAP/TUN Devices, it's finally working i think. Now i have to make a nat rule like so : >iptables -t nat -A ...
3
votes
0answers
518 views

OpenVPN and routing problem on OpenWRT

My home topology: router1 (192.168.1.1) - D-Link dsl2540u server with static IP available from Internet (ADSL via ppoe). 4 LAN ports. router2 (192.168.1.2) - D-Link DIR-300 with OpenWRT. Plays ...
1
vote
0answers
124 views

Connect to IPsec VPN using OpenSwan

I'm connected to Internet with a simple ADSL router with NAT. I have a smartphone and a laptop running linux. I need to connect to a IPsec server using OpenSwan. First I tested that it is possible to ...
1
vote
0answers
33 views

NAT-T set up using 3 linux machines

I am trying to have a simple NAT-T setup using 3 linux machines. Linux1 Linux2(NATdevice) Linux3 (eth0) 192.168.1.51 <--->(eth1)192.168.1.80 & ...
0
votes
0answers
15 views

iptables/netfilter behavior if DNAT changes mid-connection

I'm planning to leverage iptables to act as a 'poor-man's active/passive load balancer'. The plan is to have a pair of these rules: -t nat -A PREROUTING -d 10.1.2.3/32 -m condition --condition ...
1
vote
0answers
77 views

SNAT with firewall-cmd?

I have an interface with multiple IP Addresses (on CentOS 7), which is in zone "external" (with masquerade on). I want to specify that, if a connectiona attempt to a specific address goes out, to use ...
1
vote
0answers
1k views

openswan l2tp/IPsec VPN server (NAT'ed)

I have searched for a solution for this problem for a few days now and cannot seem to find anything close to my situation (server is always NAT'd and clients are sometimes NAT'd). I am trying to ...
0
votes
1answer
282 views

Linux iptables DNAT 53306 to 127.0.0.1 3306

mysql real port is 3306。 I want public network using 53306 to visit mysql, and 3306 is not allowed access from public network. How to write the iptables rules DNAT 53306 to 127.0.0.1 3306?
2
votes
2answers
224 views

Temporary redirect ports

I need a temporary redirection of some ports to another machine. I've tried: iptables -t nat -A PREROUTING -p tcp --dport 4321 -j DNAT --to-destination 192.168.121.4:80 But shorewall blocks all ...
0
votes
1answer
784 views

Routing internet on NAT server thru Squid proxy

I've configured a Squid proxy and a NAT instance and both are functioning fine. Now I want to configure a proxy server on the NAT instance so that the internet on NAT is routed through the Squid ...
1
vote
1answer
231 views

Configure NAT filtring behavior with iptables

I'm using this rule to configure SNAT: iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source 193.49.142.107:4000 I want to specify a rule to filter out packets not destined to the internal ...
1
vote
1answer
516 views

Randomize external port when doing NAT with iptables

I want to configure a NAT behavior different from the default one implemented by iptables. In this example: iptables -t nat -A POSTROUTING -o eth1 -j SNAT --to-source 193.49.142.107:2000-400 The ...
1
vote
1answer
141 views

iptables - masqueraded NAT has delayed first hop in traceroute

I'm just in the process of setting up my Linux (Debian-based) router with a PPPoE connection via an ADSL/PPPoA -> PPPoE bridge. The connection works perfectly on the router itself but a traceroute ...
1
vote
1answer
101 views

Routing packets between networks with iptables

I'm trying to create a proxy of sorts using just iptables. The linux computer (my proxy) has two ports: p2p1 is connected to the Internet. em1 is connected to a local network. There are two ...
1
vote
0answers
245 views

iptables server behind NAT accessible from outside as well as inside the nat

I have 2 machines with a KVM running on each machine - so two kvms with the below networking Host 1: 192.168.10.100 (eth2) 10.10.100.1 (virbr1) KVM 1 (NAT with Host 1): 10.10.100.128 (eth0 ...
1
vote
1answer
1k views

Conntrack TCP Timeout for state stablished not working

Im using a private IP address and I want to keep alive SNAT entries in my Router (Gateway) for at least two hours (some windows apps of my network are using TCP keepalive set to 2 hours). Gateway is a ...
4
votes
2answers
275 views

Send traffic to self over physical network on Ubuntu

I have a dual port ethernet NIC and let's say I have connected both ports in a loop and assigned the following IPs to the 2 ethernet interfaces: eth2 -> 192.168.2.1 eth3 -> 192.168.3.1 I want to ...
0
votes
1answer
137 views

SSH E-mail login alert if SSH port is as NAT

Can you help me with this problem please? How can I set e-mail alerting after SSH login when port 22 is NATed? I use Linux Debian 7. I have used these iptables rules: eth0 - external network, eth1 - ...
1
vote
1answer
211 views

Why aren't my iptables rules appearing in the relevant list after reboot?

I am trying to write two persistent NAT rules, which I save via iptables-save > /etc/iptables.ipv4.nat, and restore upon reboot via pre-up iptables-restore < /etc/iptables.ipv4.nat in my ...
2
votes
0answers
271 views

IPtables rule to double NAT [closed]

Let me rephrase it.. I just need an IPtable rule to do double NAT-ting.. Host A - Host B - Host C - Host D Host B should do both source NAT and destination NAT, so that my request from Host A ...
3
votes
1answer
920 views

iptables: redirect local request with NAT

I'd like to redirect local requests to port which is translated with NAT. I have following rules: iptables -t nat -A PREROUTING -p tcp --dport 9020 -j DNAT --to 10.0.3.11:80 however request coming ...
0
votes
0answers
26 views

Routing Application through different network interfaces [duplicate]

I have two interfaces on a server, let's call them eth0 and eth1. The underlying server is running CentOS 6.5 I would like to be able for some application to use eht0 while some others use eth1. ...
2
votes
1answer
463 views

iptables Port Forwarding — no service with the port

I have setup a network as in the image below: Firewall (FW) running CentOS 6 has two physical interfaces with subinterfaces: eth0:2 — 10.100.1.78/25 eth0:3 — 10.100.1.79/25 eth3 — 192.168.0.21/24 ...
1
vote
1answer
206 views

Redirection to services in NAT or Bridged Network only with one subdomain

I have one subdomain (dyndns). xyz.dyndns.com (f.e.) Here my question begins: I have a server for virtualisation. On the server I have multiple VMs where different web-services are available ...