NAT under Linux

[Ioannis Ioannou]

Anna wrote:
> Mporw na kanw NAT wste na "bgalw" sto internet me pragmatikh dieu8unsh enan
> server pou brisketai sto fake diktyo mou?

Tha sou pw ti exw kanei egw me 2.0.36 kernel kai ipfwadm, h geniki
kateythintiria grammh einai h idia. Proypothetei gnwseis recompile
kernel, fiaksimo ifconfig, routing kai xrhsh toy firewall.


modem ---- > Linux ---------> Real Ips
               |
               |
               -------------> Fake Ips

To Linux, exei dyo subnets mesa apo to firewall, ena masked gia ta
fakes, ena gia tis real IPs, kai oi syndeseis ginontai eite me dyo
ethernets/dyo hubs, eite me mia kai ena hub, kai IP aliases. 

dhl to Linux tha exei 3 IPs : 
1) thn IP tou PPP me to modem (opws hdh thn exei)
2) thn IP pou deinei masquarate (px 192.168.0.1), sto eth0
3) mia Real IP apo tis diathesimes sou, sto eth0:0 

Oi kanones toy firewall kanonizoun pou kaneis masquarate, kai pou aplws
routing. PX gia ta 192.168.0.x kaneis masquarate (ipfwadm -F -m k.o.k an
douleueis ipfwadm) , gia thn real IP kaneis aplo routing (ipfwadm -F -a
k.o.k). 

Ayth einai h genikh grammh. Den nomizw oti me ipchains diaforopoieitai
poly, alla den ta exw doulepsei gia na kserw sigoura.

I.Ioannou <roryt at hol.gr>
--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr/archives
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users at hellug.gr
====================================================================