Re: non-masquerade routing (nfcan: addressed to exclusive sender for this address)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2006.02.04 10:22, Chris Baechle - bangular@xxxxxxxxx wrote:
I'm trying to setup a linux router for routing of public addresses
(non-nat / non-masquerade). I really don't know what this is called
(so googling hasn't helped much).


Um, perhaps this is called 'routing'.

Once the route is set up,
and routing is turned on - something like:

echo 1 > /proc/sys/net/ipv4/ip_forward

all the *firewall* needs is permission to forward the packets
from one network/interface to the other.

Example:

[Box A] ( 72.14.207.2)  <--->  (72.14.207.1) [Linux Router]
(66.94.234.1)  <---> (66.94.234.2) [Box B]

Box A eth0 = 72.14.207.2
Linux Router eth0 = 72.14.207.1
Linux Router eth1 = 66.94.234.1
Box B eth0 = 66.94.234.2

I want to be able to connect from [Box A] to [Box B] and Box B web
server logs to show Box A's ip address (no natting); and if I do a
traceroute have the linux router show up as a hop (no bridging).

So is this something for iptables or am I barking up the wrong tree? I
checked out regular old route and iproute2 and didn't get much
further. Any point in the right general direction would be greatly
appreciated.





--
Jim Laurino
nfcan.x.jimlaur@xxxxxxxx
Please reply to the list.
Only mail from the listserver reaches this address.


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux