/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
Ryan Klette wrote:
> Hi,
>
> I have a IPchains fw, and would like to do NAT from a
> virtual IP to an internal mail server. I am trying to
> find this ipmasqadm tool, and can't seem to find it on
> the net.
>
> I am using redhat 7.
>
> Is this the right tool to do NAT?
it's the right tool for port forwarding but if you're
doing it from a "virtual" ip address, you'll also need
the iproute2 package. reply packets for a port forwarded
connection will not have the virtual ip address as their
source address. they will instead have the "base" address
of the interface which is the default route out of the
network. you need iproute2 to change this. with ipchains,
fwmark the reply packets on their way into the masquerading
host and which the ip utility from the iproute2 package,
do fwmark nat on these packets to give them the desired
source address. see http://fwup.org/ for an example on
how to do this. look for "alias port forwarding"
> Can someone please mail me this tool.
> it seems as if the site
> http://juanjox.kernelnotes.org/
> is down..
>
> Thanks
> Ryan
that's the right url for it. kernelnotes.org has
been having trouble lately. you could wait to see
if if comes good or look for an alternative site
(like rpmfind or something).
raf
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
