Can anyone advise on the correct way of setting up iptables with DNAT ?

I have about 100 machines that I wish hide behind the fw using DNAT


Do I   :-

a) Add the external IP addresses of the machines I wish to nat on to 
firewall machine

or

b) Add  static routes on our border router to send all ip traffic for these 
machines to the firewall's main ip address



Extra info - making changes to the border router is a pain in arse, as it 
is managed by our isp.

Hope this question make sense! I am still find my way with iptables


Thanks - Tom



Reply via email to