Hello,
This is my first mail to the list.
I've been trying to transport tcp 20:21 to out of my network with SNAT iptables -t nat -A POSTROUTING -p tcp --dst
200.200.200.201 --dport 20:21 -j SNAT --to-source 192.168.2.1
This is my network Firewall eth0:200.100.100.100 (NAT to 192.168.2.0/24)
eth1:200.200.200.200 (Another Class the IP)
eth2:192.168.2.50 (LAN)
Server1 in Network 192.168.2.1 My firewall have this rule in the NAT iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -j SNAT --to 200.100.100.100 This is my problem. I transport all ports of the ip 200.200.200.201 to the
192.168.2.1
iptables -t nat -A PREROUTING -p tcp -d 200.200.200.201 -j DNAT --to 192.168.2.1 But all the ports don't get out with IP 200.200.200.201 and yes with IP of Masquerade 200.100.100.100 My I need to resolved this . |