NetFilter
[Top] [All Lists]

two ISP but only one NAT

To: netfilter@lists.netfilter.org
Subject: two ISP but only one NAT
From: "Ethy H. Brito" <ethy.brito@inexo.com.br>
Date: Thu, 12 Apr 2007 17:54:10 -0300
Delivered-to: sp-com-lists@consult.net
Delivered-to: netfilter-list1@securepoint.com
List-archive: </pipermail/netfilter>
List-help: <mailto:netfilter-request@lists.netfilter.org?subject=help>
List-id: General discussion and user questions <netfilter.lists.netfilter.org>
List-post: <mailto:netfilter@lists.netfilter.org>
List-subscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=subscribe>
List-unsubscribe: <https://lists.netfilter.org/mailman/listinfo/netfilter>, <mailto:netfilter-request@lists.netfilter.org?subject=unsubscribe>
Organization: InterNexo Ltda.
Sender: netfilter-bounces@lists.netfilter.org
Hi All

Let's see if I can make that clear.

I have two ISP. ISP-A gave me just one IP and ISP-B gave a hole class-C.
Both ISPs are connected to a Linux Router via ethernet cards

I need that connections originated inside my Class-C be "NATed" thru
ISP-A IP.
And connections from outside to one of my Class-C IPs be NOT "NATed" when
outgoing.

i.e it must be possible to someone outside my Class-C to connect to some
host inside it without "NATing" the packages that goes out.

something like (i did not tried that. I am still wondering how to)

iptables -t nat -A PREROUNTING -o ISP-A \
                -m state --state  NEW \
                -j SNAT --to_source SOME_IP 

(will this rule continue to NAT the packets that follows the NEW one (the
ESTABLISHED or RELATED ones for instance)?

Fuzzy??

Regards

Ethy



<Prev in Thread] Current Thread [Next in Thread>
  • two ISP but only one NAT, Ethy H. Brito <=