On Fri, 2005-11-11 at 23:21 +0530, hareram wrote: > Hi all > > iam trying to build more than 1000 users network > > now days i see some problem with yahoo > > if using one IP source NAT, yahoo blocking that IP due to some problems come > with that IP > > so how can make NAT using 255 IP > with 1000users > > this should do randomly using 255 IP;s > > any examples > > hare > > > One can NAT to a range of IP addresses. That used to produce a rough round robin distribution of addresses; I'm not sure if that is still the case. Thus you would have: iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 1.1.1.1-1.1.1.254 or something similar. Although it is not complete, the ISCS network security management project (http://iscs.sourceforge.net) automates the creation of even the most complex NAT including many to some, some to many, overlapping and nested NAT. Good luck - John -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan@xxxxxxxxxxxxxxxxxxx Financially sustainable open source development http://www.opensourcedevel.com