Re: types of NAT with netfilter

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 2009-08-07 at 16:52 +0530, ratheesh k wrote:
> Hi ,
> 
>  I have a linux router with  only one rule
> 
>   iptables -t nat -A POSTROUTING -i eth0 -o eth1 -j MASQUERADE
> 
> 
>  What i understood is (by googling net ) is that  adding this will
> give symmetric nat support to my router , is it true  ???.

Yes

>  1. To have  " full cone nat" support  what should i do ??  Is it same
> as DMZ configuration ??
>
>  2 . restricted nat and port restricted nat cannot be implemented
> using iptables ???

These are all technically inferior to symmetric NAT, and are AFAIK
not provided by netfilter/iptables.

I suggest you describe in detail(!) what you want to achieve to the list
(possibly with ASCII diagrams) and then maybe people can help
you out.


>  3 . i installed windows STUC and tested . Test results show it is a
> portrestricted nat ... But if i make default policy for wan INPUT and
> wan PREROUING as REJECT , test  got failed ??? is it iptables
> dependend ??
> 
> Thanks,
> atheesh


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux