Re: Setup of different types of NAT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

Pedro Gonçalves a écrit :

I want to know *how to* setup this types of NAT:
/-Full Cone NAT/
/-Restricted Cone NAT/
/-Port Restricted Cone NAT/
/-Symmetric NAT/

Again ? I thought I already answered the last time you asked.

Using iptables, I set all policies to "ACCEPT" and I was able to setup two kinds of NAT:
(192.168.2.170 is my "public" address and 10.0.0.1 is my "private" address
[...]
/-"Port Restricted Cone NAT", with just a single rule:/
iptables -t nat -A POSTROUTING -o eth0 -j SNAT --to-source 192.168.2.170/

This is "symmetric NAT", not "restricted cone NAT".

Now does anyone know how to setup Restricted Cone NAT and Symmetric NAT?

AFAIK, you cannot do "restricted cone NAT" nor "port restricted cone NAT" with the stock Netfilter/iptables. It would require dedicated conntrack and NAT helper modules.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux