/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
On Wed, 21 Jul 1999, Fuzzy Fox wrote:
> Otel Florian-Daniel <[EMAIL PROTECTED]> wrote:
> >
> > I have the following problem: When forwarding traffic over a given
> > interface i want the IP address re-written to a rule I specify.
> >
> > ipchains -A forward -s x.y.z.w -i ppp1 -j MASQ
> >
> > Which, AFAICT, just re-writes x.y.z.w into whatever address the ppp1
> > iface happens to have.
>
> That is all that Masq is ever going to do. It's how it's designed.
> What use do you feel you would get, if you could put some other IP
> address out?
>
> If what you want is to send out the IP address of one of your *other*
> interfaces, then simply route traffic through that interface, and the
> masq will put that IP on the packets sent.
I've run into this before. The situation was: I have a high-bandwidth
connection and a low-bandwidth connection. I want certain traffic to
go out the low-bandwidth connection, but the source IP should be that
of the high-bandwidth connection so that the reply comes back via the
high-bandwidth connection.
We were playing around with doing this through aliases, but were
having problems because the masquerade code always uses the first IP
address associated with an interface, even if the traffic is routed
via one of the aliases on that interface.
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
-----------------------------------------------------------------------
Efficiency can magnify good, but it magnifies evil just as well.
So, we should not be surprised to find that modern electronic
communication magnifies stupidity as *efficiently* as it magnifies
intelligence.
-- Robert A. Matern
-----------------------------------------------------------------------
50 days until 9/9/99
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
