http://shorewall.net/shorewall_setup_guide.htm#Routed

>Jason Allen <[EMAIL PROTECTED]> writes:

> OK guys MNF Setup questions.  Hopefully someone can help.  I have a
> machine w/ 2 nics and the newest MNF beta2 installed on it.  My WAN
> interface eth0 is configured at let's say 120.x.x.25 (fake address used
> for an example) and my LAN interface eth1 is configured at 130.x.x.1.
> This has to be this way due to a "front-porch" setup of our network.  Now
> we have a pretty big network behind the 130.x.x.x network, everything is
> all set, but the 130.x.x.1 has to be the gateway that machines on the LAN
> use. How can I route all traffic from 130.x.x.x (LAN) to 120.x.x.25 (WAN)
> and out while keeping the routability of the addresses behind the LAN?
> What I mean is we have routable addresses on the LAN, so say I start an
> ssh session to a machine out in the world.  I don't want the machine to
> see a connection coming from a standard source address, I need it to see
> the actual IP of that machine (we have a network based billing system).
> How can I route traffic from eth0 (LAN) to eth1 (WAN) (and vice versa for
> connections coming from the outside world) successfully via MNF?  A Static
> route?  Something different?  A Masqerade rule would be something for
> private addresses like 192.168.x.x but I don't think that would keep the
> routability in tact (am I correct on that?).  Once that is done, I can get
> all the rules in place.
> 
> Can someone help me make this happen?  Does it have to be hard-coded in
> config files?  It's kind of a short time scale as the higher-ups would
> like to get this working tomorrow morning, and I'm just not seeing how to
> make it happen. Thanks in advance,
> 
> Jason

-- 
Florin                          http://www.mandrakesoft.com
                                http://people.mandrakesoft.com/~florin/

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________

Reply via email to