[NTLUG:Discuss] static NAT?

Paul Ingendorf pauldy at wantek.net
Wed Feb 6 11:47:34 CST 2002


1.)

ifconfig ethX:1 <ext ip> netmask <newnetmask> broadcast <new brodcast>

Where X is the number of the external interface.

2.)

Then you should use something like so.
iptables -t nat -A PREROUTING -d <ext ip> -j DNAT --to <int ip>



Quoting Bob Byron <bbyron at radit.com>:

> I have a linux server acting as a firewall with a private non-routable
> 
> network (lan) on one side and the internet (wan) on the other.  I have
> 
> a number of ip addresses and want to be able to take one machine on 
> the lan and make it addressable from the outside.  I am using IP
> tables
> and the private network is being \"NAT\"ed.  So, I suspect I have to 
> do two things.  
> 
> 1)  Tell my NIC card on the wan side to accept a second (virtual) 
> IP address.
> 
> 2)  I need to have the firewall stiaticly translate the lan machine
> using 
> that address.  
> 
> Any ideas how to do that?
> 
> Thanks,
> Bob Byron
> 
> 
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
> 



-- 
-->> mailto:pauldy at wantek.net
-->> http://www.wantek.net/
Running ....... Cos anything else would be a waste...
`:::\\\\\\\'                  .......  ......
 :::  *                  `::.    ::\\\\\\\'
 ::: .::  .:.::.  .:: .::  `::. :\\\\\\\'
 :::  ::   ::  ::  ::  ::    :::.
 ::: .::. .::  ::.  `::::. .:\\\\\\\'  ::.
:::.....................::\\\\\\\'   .::::..




More information about the Discuss mailing list