Static NATting

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello all,

This question will undoubtedly get me branded as a n00b :-) but I am about to go insane trying to figure this out.  Am I doing something wrong?

Here's the scenario:

I have a RedHat 8 (Kernel 2.4-18) firewall that I am going to run squid on, as well as do some static NATting for some of the administrative PC's here.  I have configured the Cisco router to direct all the traffic from the affected /24 subnet to the linux box, and I am trying to do a 1-to-1 NAT so we can do things like Terminal Services, etc. across the internet.  I am using the following commands (the addresses are for my PC)

iptables -t nat -A POSTROUTING -s 10.227.101.4 -j SNAT --to 207.157.9.<something>
iptables -t nat -A PREROUTING -s 207.157.9.<something> -j DNAT --to 10.227.101.4

And all the traffic summarily dies at the firewall :-)

I have aliased the 207.157.9.<something> address to the eth1 interface of the firewall.  What simple, obvious thing have I missed?

TIA,

--Greg



Gregory B. Dickinson, CNE CCNA
Systems Engineer
Logista Solutions
(205) 231-5602
(tQ = 2b|!2b)

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Dickinson, Greg
ORG:;Technical Services
EMAIL;WORK;PREF;NGW:GDickinson@xxxxxxxxxxxxxxxxxxxx
N:Dickinson;Greg
END:VCARD

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Dickinson, Greg
ORG:;Technical Services
EMAIL;WORK;PREF;NGW:GDickinson@xxxxxxxxxxxxxxxxxxxx
N:Dickinson;Greg
END:VCARD

BEGIN:VCARD
VERSION:2.1
X-GWTYPE:USER
FN:Dickinson, Greg
ORG:;Technical Services
EMAIL;WORK;PREF;NGW:GDickinson@xxxxxxxxxxxxxxxxxxxx
N:Dickinson;Greg
END:VCARD


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux