Shorewall users - Feb 2012 - Natting

Hi

 

I have 2 routers connected to clients.   On both the clients they use
10.0.X.X ips.

 

We use 192.168.1.X in the DMZ.

 

So I have the linux FW in our DMZ (192.168.1.1) and client1 router
(192.168.1.10 internal and 10.0.X.X) and client2 router (192.168.1.20
internal and 10.0.X.X)

 

My idea is to rewrite the client2 ips as 172.16.X.X to 10.0.X.X

 

How can I do this in shorewall. 

 

I understand that I will have to use DNAT rules (Is their an easier way than
to write one for every ip?) 

I think I need SNAT and marking?

 

Other suggestions also involved.

 

Kind Regards

 

Jan van der Vyver



------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/

On 02/16/2012 12:50 AM, Jan van der Vyver wrote:
> I have 2 routers connected to clients.   On both the clients they use
> 10.0.X.X ips.
> 
> We use 192.168.1.X in the DMZ.
> 
> So I have the linux FW in our DMZ (192.168.1.1) and client1 router
> (192.168.1.10 internal and 10.0.X.X) and client2 router (192.168.1.20
> internal and 10.0.X.X)
> 
> My idea is to rewrite the client2 ips as 172.16.X.X to 10.0.X.X
> 
> How can I do this in shorewall. 
Use the /etc/shorewall/netmap file.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/