former03 | Baltasar Cevc wrote:
Hi Mogens,
Give the linux box two IP numbers externally,
e.g. 130.226.184.38 and 130.226.184.39, register
130.226.184.38 with the journal, change the
internal IP numbers so that:
> [...]
/sbin/iptables -t nat -A POSTROUTING -s 172.20.0.0/17 -o eth0 -j
MASQUERADE
/sbin/iptables -t nat -A POSTROUTING -s 172.20.128.0/17 -o eth0:1 -j
MASQUERADE
eth0:1 is not a real interface so no packets can go out there. It would be
good if iptables would throw an error, but probably it's hard for the
software
to tell what are 'real' interfaces.
You must use the SNAT target to achieve what you want:
/sbin/iptables -t nat -A POSTROUTING -s 172.20.0.0/17 -o eth0 -j SNAT
--to 130.226.184.38
/sbin/iptables -t nat -A POSTROUTING -s 172.20.128.0/17 -o eth0 -j SNAT
--to 130.226.184.39
Thanks! It works.
iptables did give me a warning about eth0:1, but an "iptables -t nat -L"
did show that the command was accepted.
Mogens
--
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: mk@xxxxxx Homepage: http://www.crc.dk
