Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I need the ability to make all of my outbound traffic to IP address a.b.c.d route to IP address e.f.g.h.

Here's the problem, I'm being handed a URL from a server. This URL contains dotted IP addresses (please don't tell me to change the application). The URL I'm being handed is for a service that resides within a firewalled environment. Unfortunately, I've been given the internal IP address (for good reason) and as such my machine cannot access that address directly (e.g. 10.10.1.1). However, we have setup a public address (10.10.100.1) that is NAT'd on the router to the internal address (10.10.1.1).

I don't want to throw a piece of hardware between my machine and the router. All I want to know is if it is possible to use the ip address 10.10.1.1 on my machine and have my machine NAT that into 10.10.100.1 as part of the routing. This is windows 2003.

share|improve this question
    
In the end I was able to solve my issue. The target address was not directly routable from my server. So, I setup a loopback adapter on the machine and assigned the target IP address to the loopback adapter. Then I installed passport to forward my data and connections from the loopback to the public address. –  Ajaxx Sep 29 '09 at 19:59

1 Answer 1

Its a pity that it's using an IP address, because otherwise you could just change an entry in your HOSTS file to re-map the FQND.

Anyway, I don't know of any way in Windows 2003 to do what you want, but there's only one way you can do this, and that's to modify the packet at some point along its path for the header to read 10.10.100.1 - otherwise, even if you could somehow force the packet to the other address it would have the original header and the device at the other end would just drop it.

What you will need is some device, in-line with your machine, that does packet inspection on each and every TCP packet that leaves your computer. It needs to check the destination and modify it if it matches a certain pattern. I am sure that some such tool exists in a hackers toolkit somewhere, but I've no idea what it might be.

The other option is to deliberately use ARP poisoning to re-map the MAC address of 10.10.11.1 to 10.10.100.1, and then set up the other device to listen on both IP addresses on its WAN interface (often called Virtual IPs).

Hope this provides some help!

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.