NAT under Linux

[Michalis Kabrianis]

On 09-Jul-99 Ioannis Ioannou wrote:
> Anna wrote:
>> Mporw na kanw NAT wste na "bgalw" sto internet me pragmatikh dieu8unsh enan
>> server pou brisketai sto fake diktyo mou?
> 
> Tha sou pw ti exw kanei egw me 2.0.36 kernel kai ipfwadm, h geniki
> kateythintiria grammh einai h idia. Proypothetei gnwseis recompile
> kernel, fiaksimo ifconfig, routing kai xrhsh toy firewall.
> 
> 
> modem ---- > Linux ---------> Real Ips
>                |
>                |
>                -------------> Fake Ips
> 
> To Linux, exei dyo subnets mesa apo to firewall, ena masked gia ta
> fakes, ena gia tis real IPs, kai oi syndeseis ginontai eite me dyo
> ethernets/dyo hubs, eite me mia kai ena hub, kai IP aliases. 
> 
> dhl to Linux tha exei 3 IPs : 
> 1) thn IP tou PPP me to modem (opws hdh thn exei)
> 2) thn IP pou deinei masquarate (px 192.168.0.1), sto eth0
> 3) mia Real IP apo tis diathesimes sou, sto eth0:0 
> 
> Oi kanones toy firewall kanonizoun pou kaneis masquarate, kai pou aplws
> routing. PX gia ta 192.168.0.x kaneis masquarate (ipfwadm -F -m k.o.k an
> douleueis ipfwadm) , gia thn real IP kaneis aplo routing (ipfwadm -F -a
> k.o.k). 
> 
> Ayth einai h genikh grammh. Den nomizw oti me ipchains diaforopoieitai
> poly, alla den ta exw doulepsei gia na kserw sigoura.
> 
> I.Ioannou <roryt at hol.gr>
> --

Egw pali ap' oti katalaba, ayto den einai NAT.
NAT mono se pyrines 2.2.x, experimental, me ipchains kai thelei recompile o
kernel, giati o default den to exei synithws (Suse kai OpenLinux. Gia RedHat
den kserw).
Dystyxws den to exw dokimasei gia na kserw perissotera :-(

Michalis Kabrianis
kabrianis at hellug.gr
--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at hellug.gr
Ta archives tis listas einai sto http://lists.hellug.gr/archives
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users at hellug.gr
====================================================================