Re: NAT and DNS/NTP servers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Saturday 01 May 2004 6:42 pm, Andrew E. Mileski wrote:

> Antony Stone wrote:
> > On Saturday 01 May 2004 3:52 am, Andrew E. Mileski wrote:
> >>I'm observing lost packets when a gateway doing NAT also locally hosts
> >>a server for DNS or NTP.  I believe this the result of the ambiguous
> >>conditions that can exist when routing server-to-server packets coming
> >>into the gateway.
> >
> > Show us your rules and explain what is ambiguous about them?
>
> There is only one rule needed if all other defaults are ACCEPT:
>
> This one is on my network:
> iptables -t nat -A POSTROUTING -s ! $WAN_IP -o $WAN_IFC -j SNAT
> --to-source $WAN_IP

What is $WAN_IP, and what are the IP addresses on the machine on which this 
rule is running?

I still don't really understand why you need a SNAT rule on a machine which is 
running the service locally?

Please give a clear explanation of where the client is, where the server is, 
and why you want a SNAT rule in the system.   Also, please explain what is 
"ambiguous" about all this, as you described it - I don't understand what you 
mean by that in this context.

Regards,

Antony.

-- 
Never write it in Perl if you can do it in Awk.
Never do it in Awk if sed can handle it.
Never use sed when tr can do the job.
Never invoke tr when cat is sufficient.
Avoid using cat whenever possible.

                                                     Please reply to the list;
                                                           please don't CC me.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux