Re: Newbie request

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 12/12/06 05:10, Rob Sterenborg wrote:
Yes, I was assuming that the default gateway is set to the router's IP, but in
fact we don't know about the connection to the internet which is there
somewhere.

No, we do not know about the gateway. However, recall from the OP that "eth1 is set to DHCP and is part of 192.168.0.0/24", which means that the route back to the 192.168.1.0/24 network could change as the ""router in question reboots. So, either the routers are running some sort of routing protocol, or the 192.168.1.0/24 network needs to be ""hidden from the 192.168.0.0/24 network. This is very easily accomplished with SNAT / MASQUERADE.

Something to keep in mind is that the source IP is a dynamic IP on the 192.168.0.0/24 network, so it would be better if MASQUERADE was used verses SNAT. SNAT does not clear out stale nat translations like MASQUERADE does when the IP for the interface changes.



Grant. . . .


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux