[NTLUG:Discuss] static NAT?
Paul Ingendorf
pauldy at wantek.net
Wed Feb 6 11:47:34 CST 2002
1.)
ifconfig ethX:1 <ext ip> netmask <newnetmask> broadcast <new brodcast>
Where X is the number of the external interface.
2.)
Then you should use something like so.
iptables -t nat -A PREROUTING -d <ext ip> -j DNAT --to <int ip>
Quoting Bob Byron <bbyron at radit.com>:
> I have a linux server acting as a firewall with a private non-routable
>
> network (lan) on one side and the internet (wan) on the other. I have
>
> a number of ip addresses and want to be able to take one machine on
> the lan and make it addressable from the outside. I am using IP
> tables
> and the private network is being \"NAT\"ed. So, I suspect I have to
> do two things.
>
> 1) Tell my NIC card on the wan side to accept a second (virtual)
> IP address.
>
> 2) I need to have the firewall stiaticly translate the lan machine
> using
> that address.
>
> Any ideas how to do that?
>
> Thanks,
> Bob Byron
>
>
>
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
>
--
-->> mailto:pauldy at wantek.net
-->> http://www.wantek.net/
Running ....... Cos anything else would be a waste...
`:::\\\\\\\' ....... ......
::: * `::. ::\\\\\\\'
::: .:: .:.::. .:: .:: `::. :\\\\\\\'
::: :: :: :: :: :: :::.
::: .::. .:: ::. `::::. .:\\\\\\\' ::.
:::.....................::\\\\\\\' .::::..
More information about the Discuss
mailing list