/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
>I don't know what 200, 201 and 202 are for but everything is working fine
>now thanks to all of you. Now the only thing that is left is forwarding all
>the ports from ppp2 to 192.168.3.1 so does anyone know what the "best" way
>to do that?
I thought that IPROUTE2 could do 1:1 NAT but maybe I was
wrong. What you probably need to look at is "ipnatadm"
though I don't know if it is compatible with IPFWADM
if you are using any PORTFW stuff.
Though I can't help you with this either (sorry), check
out:
http://www.suse.de/~mha/linux-ip-nat/diplom/nat.html
Anyway.. this is very interesting to hear that not
only did you get ALIASed interfaces to MASQ ok but
you also got them to work with Policy-based routing.
Rami, if I can ask a favor, please let us know if you
see weird behavior, quirkyness, etc with this solution
at any point in the future. If things work out for you,
I'll reverse some of the statements I've made in the
HOWTO as many people really need this functionality but
it hasn't worked well or at ALL in the past. Obviously,
changes have been made to the NAT and/or IP stack code
in the kernel that has changed things for the better!
(I wish the kernel people would tell me about stuff
BEFOREHAND!)
(For the rest of you following this thread, this URL above
is an EXCELLENT document on how various styles of NATs
work [1:1, 1:M, x:y] and even talks about IPMASQ's extensive
problems and work arounds. I definitely recommend all
of you to give it a quick scan!)
--David
.----------------------------------------------------------------------------.
| David A. Ranch - Linux/Networking/PC hardware [EMAIL PROTECTED] |
!---- ----!
`----- For more detailed info, see http://www.ecst.csuchico.edu/~dranch -----'
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
