Re: How to configure NAT with dynamic ip

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Monday 15 December 2003 1:47 pm, prasanna wrote:

> Dear friends,
>     please guide how to configure NAT with dynamic ip.
>
> My plan is give intrenet address to my clients thro iptables. I had
> dynamic ip connection

For outgoing connections, do the NAT using the MASQUERADE target instead of 
SNAT:

iptables -A POSTROUTING -t nat -o $EXTIF -j MASQUERADE


For any incoming connections you want to forward, use the interface name 
instead of trying to use an IP address:

iptables -A PREROUTING -t nat -i $EXTIF -p tcp --dport 22 -j DNAT --to 
192.168.192.168

as an example to forward SSH connections to an internal machine.

Antony.

-- 
In Heaven, the police are British, the chefs are Italian, the beer is Belgian, 
the mechanics are German, the lovers are French, the entertainment is 
American, and everything is organised by the Swiss.

In Hell, the police are German, the chefs are British, the beer is American, 
the mechanics are French, the lovers are Swiss, the entertainment is Belgian, 
and everything is organised by the Italians.

                                                     Please reply to the list;
                                                           please don't CC me.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux