On Thu, 12 Dec 2013 14:34:44 -0800, Phil Oester wrote:
On Thu, Dec 12, 2013 at 10:55:53PM +0100, Igor S wrote:
Dear netfilter guru's
I am trying to build a kind of a dynamic 1:1 SNAT gateway that is
supposed to build every incoming IP to a unique internal IP in the
internal network without any port mangling.
Then you should be using the NETMAP target.
NETMAP (IPv4-specific)
This target allows you to statically map a whole network of
addresses onto another network of addresses. It can
only be used from rules in the nat table.
--to address[/mask]
Network address to map to. The resulting address will
be constructed in the following way: All 'one' bits
in the mask are filled in from the new `address'. All
bits that are zero in the mask are filled in from
the original address.
Phil
Hi Phil,
Thanks for the quick reply
NETMAP would not be good for my case as the server is not supposed to
handle the entire 100.0.0.0/8 network. It only has to map the number of
addresses specified in the range. And i need to know in advance what
addresses can be used on a particular NAT server.
The idea of using SNAT is to "compress" the source network and
translate only the active clients.
Thanks,
Igor
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
