Shorewall users - Sep 2012 - nat & providers & route_rules questions

hi

I''ve got the situation that I have a virtual shorewall firewall/router 
which will get different single ip''s on one interface in different 
subnets with different gateways which need to be nat''ed to the inside 
network. I''d really love to do proxy arp but the provider
isn''t able to
give me an ip range (cloud computing hooray).

If I understand it correctly just doing one-to-one nat will not work, as 
the default gateway changes for every ip. so i need do add a providers 
entry for every ip with the correct gateway. 

Will this work with one-to-one nat? Do I need to add entries in 
route_rules file to get the traffic right or is the providers entry 
enough?

Thanks for any hints!

- Thomas


------------------------------------------------------------------------------
Got visibility?
Most devs has no idea what their production app looks like.
Find out how fast your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219671;13503038;y?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html

On 09/28/2012 05:09 AM, Thomas Mueller wrote:
> hi
>
> I''ve got the situation that I have a virtual shorewall
firewall/router
> which will get different single ip''s on one interface in different
> subnets with different gateways which need to be nat''ed to the
inside
> network. I''d really love to do proxy arp but the provider
isn''t able to
> give me an ip range (cloud computing hooray).
>
> If I understand it correctly just doing one-to-one nat will not work, as
> the default gateway changes for every ip. so i need do add a providers
> entry for every ip with the correct gateway.
>
> Will this work with one-to-one nat? Do I need to add entries in
> route_rules file to get the traffic right or is the providers entry
> enough?
It will work, and you do need entries in the rtrules (formerly 
route_rules) file.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
How fast is your code?
3 out of 4 devs don\\\''t know how their code performs in production.
Find out how slow your code is with AppDynamics Lite.
http://ad.doubleclick.net/clk;262219672;13503038;z?
http://info.appdynamics.com/FreeJavaPerformanceDownload.html