My aim is to test whether my router supports what kind of NAT ..and to know abt how we can make nat types that are not supported ,working ..... A { client computer } --------------------------> Router ------------------------> internet ... This is my setup . Thanks, Rat On Fri, Aug 7, 2009 at 5:40 PM, Thomas Jacob<jacob@xxxxxxxxxxxxx> wrote: > On Fri, 2009-08-07 at 16:52 +0530, ratheesh k wrote: >> Hi , >> >> I have a linux router with only one rule >> >> iptables -t nat -A POSTROUTING -i eth0 -o eth1 -j MASQUERADE >> >> >> What i understood is (by googling net ) is that adding this will >> give symmetric nat support to my router , is it true ???. > > Yes > >> 1. To have " full cone nat" support what should i do ?? Is it same >> as DMZ configuration ?? >> >> 2 . restricted nat and port restricted nat cannot be implemented >> using iptables ??? > > These are all technically inferior to symmetric NAT, and are AFAIK > not provided by netfilter/iptables. > > I suggest you describe in detail(!) what you want to achieve to the list > (possibly with ASCII diagrams) and then maybe people can help > you out. > > >> 3 . i installed windows STUC and tested . Test results show it is a >> portrestricted nat ... But if i make default policy for wan INPUT and >> wan PREROUING as REJECT , test got failed ??? is it iptables >> dependend ?? >> >> Thanks, >> atheesh > > > -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html