search for: snating

Hi all, i got the following configuration: * NET1: DSL Line with /28 network, let''s call it 10.1.0.0/28 * NET2: DSL Line with /28 network, let''s call it 10.2.0.0/28 * INTNET: Internal Network with productive servers and workstations, 192.168.1.0/24 Obvisiously the 10er networks are official networks but censored to protect my customer. The routerbox assigns on eth0 all

Hello! I have the following setup: 1) a connection to my ISP with a public IP (1.2.3.4) with the gateway 1.2.3.1 2) an allocated IP class with 64 addresses (5.6.7.192/26) 3) two LANs connected through two NICs: a) 192.168.0.0/24 on eth1 (192.168.0.1) b) 10.0.0.0/24 on eth2 (10.0.0.1) The IPs from the allocated class are all assigned to eth0. The networks are SNATed to the external IP and

Hi list, I am a happy user of shorewall, i have followed the instructions in the shorewall''s web site relative to the squid transparent proxy configuration,all works ok, but i have been instructed to let adicional specified ports (aplications) to be snated (allowed to run) together to the web browsing service,i mean if i snat the network (i have a static ip from my isp), all

...using my 4 links (DSL links) My setup looks like below LAN ----Local IP-----Connected to Linux Box Eth1 Eth5-- connected to one DSL1 Eth4-- connected to one DSL2 Eth3-- connected to one DSL3 Eth2-- connected to one DSL4 iam marking them in prerouting randomly and puting them in table and snating at POSROUTING iam able to achieve with 2links with out any problem and making own script to work as deamon to check the link status and keep change the markings now problem when i add 2+2 more links could not able to understand.. how can i do that.. and how can i mark them could some one guid...

https://bugzilla.netfilter.org/show_bug.cgi?id=1241 Bug ID: 1241 Summary: Please support inverting filters Product: conntrack-tools Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: conntrack Assignee: netfilter-buglog at

Hi list, This is my first post there. CONTEXT : -------------- I have a little lan behind a shorewalled box (internet) -- NET_IP [gateway] LOC-IP -- (lan X.Y.0.0) internet -> net zone connected to the gateway via a ppp interface lan -> loc zone connected to the gateway via eth1 NET_IP and LOC_IP are defined in shorewall params file GOAL : --------- i want to forward http and

Hi all, I''ve got a BOX running CentOS 4.5. It acts as a firewall + router. I have installed both iptables and iproute2. I has 3 network cards. eth0 is connected to Internet (is has an internet ip. pls assume its ip is 1.2.3.4/29). it is a 256 Kbit link. eth1 is DMZ. its ip is 192.168.100.254 eth2 is LAN. Its ip is 192.168.101.254 I have alreday shaped traffic to 64 Kbit on eth1 for

Hello, people. I read iptables tutorial and lartc, but i''m still confused with one trouble. May be this question was discussed already, so forward me solution, if is. So, there''s a trouble. I have debian etch linux. 2.6.18-4 kernel. On this computer i have three interfaces: eth0 - my lan, eth1, eth2 - providers. By default all internet traffic routed through eth2. But i

Helo to all, I am attempting to establish an IPSEC tunnel to a remote freeswan G/W with my laptop. My laptop sits in behind shorewall at home. From the documentation, this is what I Modified in Shorewall: /etc/shorewall/tunnels: ipsec loc 24.65.x.x /etc/shorewall/policy vpn loc ACCEPT loc vpn ACCEPT My question is, have I left anything out?

Hi, Is it possible to configure libvirt to use NFSv4 for a pool? I am doing some iptables SNATing and rpc.statd can't handle it. Thanks, Paul -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20101014/7a771fe1/attachment.htm>

Hi, I have a question concerning the configuration of multiple uplinks as described in the lartc howto, chapter 4.2: I have a scenario as described in the lartc in Chapter 4.2 (Routing for multiple uplinks/providers), i.e. one linux router with two uplinks: * 2 Mbps low delay DSL connection on device eth0 * 256 kbps higher delay DSL connection on device ppp0 I''m routing packages

Hello, I''m having a very strange problem concerning traceroute and routing and didn''t know if lartc or netfilter would be the correct choice for asking. (so sorry if my question is misplaced) I have the following setup: public ip -- gw1 -- 172.16.0.1 --- 172.16.0.2/and public ip''s --- gw2 --- switch --users (public and private ip addresses; ip-user-pub) from the

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=554 Summary: Packet illegaly bypassing SNAT Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: NAT AssignedTo: laforge@netfilter.org ReportedBy:

...Debian box in hopes that it will act as a router for this public subnet like so: ppp0 DSL IP (via PPPoe) eth1 192.168.1.0 (Public subnet) eth2 XX.XX.XX.XX (Our DMZ) I''ve downloaded the 2.4.31 kernel source, patched it with the Julianpatches and read nano.txt about 8 times. I am SNATing the outgoing traffic to the appropriate address with iptables depending on the interface like so, iptables -t nat -A POSTROUTING -s $NATNET -o ppp0 -j SNAT --to $DSL iptables -t nat -A POSTROUTING -s $NATNET -o eth2 -j SNAT --to $WRL I made sure to include the stateful iptables statements as th...

Hello, I have the following setup on linux 2.6.32... CentOS 6.x : ipsec tunnel eth0-10.255.3.254/25 - eth1-pub add1 <-> eth1-pub add2 - eth0-10.255.5.254/25 I am trying to SNAT remote private address 10.255.5.128/25 packets when they come out of the ipsec tunnel to make it appear like it was from local address 10.255.3.254. I am doing a source ping from the right side to a device on the

Cross posted to Netfilter and LARTC... Grant & ArcosCom Linux User Thanks for your replies. Firstly, one problem was with my Token Bucket Filler on one of the interfaces, as it was dropping lots of packets and stopping connections from working over that interface. This lead to some strange results, with apparent partial success. Secondly, I''ve decided against trying to get it

As suggested on the netfilter list, I''m posting here too: Current network layout: Internet | ----100.100.251.217---- / (router) \ Internet | | | 100.100.251.220 100.100.251.218

Hi, I''ve been implementing a load balancing solution using CONNMARK, based on solution described by Luciano Ruete at [1]. Gracias por el post y por apuntar en la dirección correcta Luciano! Once implemented, I''ve found that due to some reason packets aren''t properly marked (or improperly remarked) and sent out using the wrong interface. My topo setup is:

Hi all, I need a little help, i am studing htb to control user bandwidth (download/upload) and I made a script as below to test. I am testing using ttcp tool from by linux box to other linux (192.168.200.51). my box <---- Linux = more than 128kbit mybot -----> Linux = get 128kbit But I want to control both ways, what am I missing? script: EXTIF=eth0 INTIF=eth1 TC=/sbin/tc DOWN=128

A most puzzling network conundrum has arisen while I was attempting to create a virtual network behind a virtual router which in turn connects the virtual network to my real network. My machine (192.168.103.23) is on the network with my router (192.168.103.1). The virtual router, tiara, has to connect my 192.168.103.* network with the virtual 10.0.0.* network which comprises two other virtual