On Apr 30, 2004, at 9:20 PM, mitchel wrote:


The IP addresses assigned by my telco/isp to use for the serial (ppp) interface is 67.153.163.202 with a gateway of 67.153.163.201 and a netmask of 255.255.255.252. Thanks to Shido I have a nice firewall script which routes all the network traffic behind the asterisk server out the data channels and to the internet. If I go to www.network-tools.com it shows my ip address as 67.153.163.202.

Going back in time to when I was using the Adtran router I was provided by my isp with the public ip address range of 67.153.163.210-67.153.163.214 with a gateway of 67.153.163.209 and a netmask of 255.255.255.248. With these settings I was supposedly able to use public "real" ip addresss on my own servers so that I could host miscellaneous things on it (mail, http, dns, etc).

What I would like to do is map all or at least one of those ip addresses to an internal server. After doing a lot of reasearch and asking many questions I found out that to do what I need means that in theory no server anywhere will be assigned the ipaddress of 67.153.163.210 but only a simple routing rule will do the trick which is what I was trying to do with the following iptables rules.

iptables -t nat -A PREROUTING -p tcp --dst 67.153.163.210 -j DNAT --to-destination 193.169.0.210
iptables -A FORWARD -d 193.169.0.210 -j ACCEPT

Well the problem is that you don't have those addresses anymore. Here is your network (from ipcalc -- binary omitted):

Address:   67.153.163.202
Netmask:   255.255.255.252 = 30
Wildcard:  0.0.0.3
=>
Network:   67.153.163.200/30
Broadcast: 67.153.163.203
HostMin:   67.153.163.201
HostMax:   67.153.163.202
Hosts/Net: 2

As you can see 200 and 203 cannot have hosts on them, so you have 201 and 202.
But you are 202 and your isp is 201!


In short, if you want more hosts get your isp to give you more addresses.

Jeb Campbell
[EMAIL PROTECTED]

_______________________________________________
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to