I am doing NAT traffic forwarding using iptables (188.8.131.52 => 184.108.40.206) with the following commands:
iptables -t nat -A PREROUTING -d 220.127.116.11 -j DNAT --to-destination 18.104.22.168 iptables -t nat -A POSTROUTING -d 22.214.171.124 -j SNAT --to 126.96.36.199
It works fine except for one thing: If I check apache logs, doing firewall rules etc. on server 188.8.131.52, it looks like all traffic is comming from 184.108.40.206.
Of course it makes a bit sense, since it is 220.127.116.11 that is forwarding the traffic to 18.104.22.168, but I assumed NAT would pass the original IP "requestor" in the package?
Is there a way to make the traffic to 22.214.171.124 have the "real" orignal IP?
Currently, it makes it very difficult to setup good firewall rules and other security stuff as ALL traffic seems to be comming from 126.96.36.199 regardless what the original traffic is actually comming from.