On Sat, Mar 02, 2002 at 01:48:43AM -0800, Bambang Yulianto wrote: > hi guys .. I'm linux newbie > I have LAN that connected to internet. > here is the pic : > > [internet]----------[Linux]----------[LAN] > | | | > 202.149.83.192-207 202.149.83.194 192.168.0.1-35 > > with RedHat Linux 2.4.18, how can I make every 4 ip on > LAN will be 1 ip on the internet ? (sorry abt my > english ) > example: > > 192.168.0.1-4 ---> 202.149.83.195 > 192.168.0.4/30 --> 202.149.83.196 > 192.168.0.8/30 --> 202.149.83.197 You are actually saying that your system was masquerading. > with my old linux (2.2.16) .. > I use : > modprobe dummy > ifconfig dummy0 202.149.83.195 netmask 255.255.255.240 > ifconfig dummy0:1 202.149.83.196 netmask > 255.255.255.240 > ifconfig dummy0:2 202.149.83.197 netmask > 225.255.255.240 > . > . > . > ip rule add from 192.168.0.0/30 nat 202.149.83.195 > ip rule add from 192.168.0.4/30 nat 202.149.83.196 > ip rule add from 192.168.0.8/30 nat 202.149.83.197 > . > . > . > > but It's NOT WORKING on my new 2.4.18 Linux. This is on 2.2 a way to masquerade from specific ip adresses. As you can read in the ip manual, it really uses the ipchains masquarading stuff. As it also says in the manual that this has completely been removed (except for fastnat) from that layer, since netfilter does it good. > what should I do ? Use netfilter/iptables. iptables -t nat --append POSTROUTING --source 192.168.0.0/30 --jump SNAT --to-source 202.149.83.195 Or something like that. -- <ard@telegraafnet.nl> Telegraaf Elektronische Media http://wwwijzer.nl http://leerquoten.monster.org/ http://www.faqs.org/rfcs/rfc1855.html Let your government know you value your freedom. Sign the petition: http://petition.eurolinux.org/