In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

0
votes
0answers
10 views

Routing and RAS with multiplice public IP-Adresses

I have two public ips, e.g. (1) = 111.111.111.1111 and (2) = 222.222.222.222 on one NIC of a Windows Server 2012 R2 Server. I'm using "Routing and RAS" to forward some ports by NAT rules to Hyper-V ...
1
vote
1answer
14 views

Apache presents wrong certificate when accessed via load balancer [duplicate]

I've got a server that has two SSL certificates set up, one for internal access where it is accessed along the lines of host.my-local.net and other for external access where it is accessed similar to ...
-2
votes
2answers
21 views

Could I have 2 nat on vpc [on hold]

There is a vpc on amazon that has two subnets. The outer one has internet access and the inner one using NAT server to connect to internet. Inner subnet have plenty of servers for development and ...
3
votes
1answer
52 views

Internet access from private VPC subnet?

My brain is a little bit fried trying to figure this out but I can't seem to get private subnets to connect to the internet to grab updates for example. Basically all I want is web access for these ...
0
votes
2answers
27 views

Require help of finding issue with DNS, NAT or NS [on hold]

Before giving you the problem let me try to explain the network - Server is directory connected to a physical firewall and internet service is coming to firewall. Firewall has a static IP and from ...
-1
votes
0answers
21 views

My Network place can't open each workgroup using WINS Server and NAT

I have two Network with NAT or router is another stand alone server and with WINS server (windows Server 2003), bellow my network scope network 1 : 192.168.0.0/24 network 2 : 192.168.88.0/24 All ...
1
vote
3answers
70 views

Forward Traffic in & out, NAT iptables

I have a box setup as DHCP Server with NAT ipv4 forwarding enabled. Currently the box uses eth0 to connect to a local network and has access to the internet, it has another 3 interfaces, eth1, eth2 ...
0
votes
1answer
30 views

Cisco static NAT not working on LAN side

I have a web server in my private network that has the ip address 192.168.1.134. I need to allow users to access this web server from both the internet and the private network. The public ip address ...
1
vote
2answers
33 views

OpenWRT Barrier Breaker - Router does not route

I've upgraded my TP-Link 1043 router to OpenWrt 14.07. Everything is perfect, Wifi and LAN are bridged, LAN machines can access each other by name, I can SSH into the router, and the router can access ...
1
vote
1answer
23 views

Force Cisco ASA to change source port NAT

I have a 2 devices, a Cisco ASA and sitting behind it another device. Both the Cisco and the other device have IPsec tunnels but to different locations. I need to ensure that the source port of the ...
3
votes
0answers
119 views
+50

Amazon EC2 VPC: NAT instance download speed performance drop

I have a set of servers inside Amazon EC2 in VPC. Inside this VPC I have a private subnet and a public subnet. In the public subnet I have set up a NAT machine on a t2.micro instance that basically ...
0
votes
2answers
34 views

How to redirect a packet with iptables that match a certain pattern? (eg a QUERY command with UDP)

I have a certain packet that I want at all times to be redirected to a specific ip on my virtual network interface. As for now my iptables is setup like this: (the commands, I use \ as for now to ...
0
votes
1answer
19 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
13 views

Connections from virtual host to internet OK, but to rest of LAN, broken [migrated]

In a notebook running Ubuntu 14.04 I have installed VirtualBox and created a virtual server with Windows 7. The PC is connected to a 192.168.x.y LAN. The virtual server is in a host-only network with ...
1
vote
2answers
52 views

Make CentOS 7.x a port forwarding NAT device

I would like to make CentOS a port forwarding NAT machine using iptables. This is the first time I've tried this and I think i might need a little help. This is the configuration i'm trying to ...
1
vote
1answer
27 views

Are iptables prerouting (DNAT) packet changes visible to subsequent chains?

I was reading Rusty Russell's NAT Howto when I came across this section: 6.2. Destination NAT This is done in the PREROUTING chain, just as the packet comes in; this means that anything else on ...
1
vote
1answer
71 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
1
vote
1answer
83 views

AWS EC2 Ubuntu 14.04 Instance smtp port forwarding from 25 to 2025

I am trying to step up port forwarding from port 25 to port 2025 on the same AWS EC2 Ubuntu 14.04 instance using iptables. I am using port 2025 to receive income emails using Alfresco. The first step ...
3
votes
2answers
59 views

Static public IP issue on Cisco ASA 5512x

This is our scenario: We have an Cisco ASA 5512x and we have 2 different Internet connections from different ISPs connected with it. ISP A is being used for the users browsing traffic(normal ...
0
votes
0answers
9 views

iptables NAT can't initialise on Debian openvz [duplicate]

So i want to create a nat rule for an openVPN server. After getting trouble with the TAP/TUN Devices, it's finally working i think It's working greate but not routed so useless. Now i have to make a ...
-1
votes
1answer
37 views

Forward incoming packets from port 25565 to natted internal client? IPTables [closed]

I have been learning to use iptables recently and i made a small nat network in virtualbox. I have a Debian server Natting for the internal clients. One of the internal clients is hosting a minecraft ...
0
votes
0answers
36 views

Ubuntu as IPSec L2TP client with NAT traversal

Goog afternoon, I have a corporate local network located behind NAT. There is another NAT in this local network for the corprorate server on Ubunit 12.04. So if clients connect to that server ...
0
votes
0answers
39 views

SFTP Reverse-Proxy using iptables on custom port

I want to give SFTP access to anyone into to my Server (IP: ss.ss.ss.ss) passing through Proxy (reverse-Proxy? IP: pp.pp.pp.pp), so that IP ss.ss.ss.ss is never seen by whoever is connecting to the ...
-4
votes
1answer
39 views

Can I use an external IP to make 2 internal IP's establish a TCP/UDP connection? [closed]

As I understood, in order to make a connection to an internal IP (behind NAT), the computer behind the internal IP have to send the request first before the other side will be able to answer it, So if ...
0
votes
0answers
56 views

iptables - dropping specific established connections after X hours

Is there a way with iptables to drop specific established connections after X hours? We have an application with limited connection support, and occasionally we see some tcp sessions that shouldn't ...
1
vote
2answers
62 views

Is it a security improvement to use NATed network?

There is a website that blocked an ISP's subnet (because attacks came from that network). The ISP gives it's users only NAT'ed IP addresses, so the clients are geting 10.x.x.x IP addresses on their ...
0
votes
1answer
51 views

How to start with IPv6 subnetting on linux gateway

We are currently having perfectly working IPv4 network with a typical layout - internal network with all servers splitted to VLANs in 10.0.0.0/8 (each vlan is /24) and external network with public ip ...
0
votes
1answer
87 views

How to trace dropped TCP connections?

Trying to help someone with a situation where TCP connections get mysteriously dropped after a few minutes for no apparent reason (this happens even with non idle connections). Both client and server ...
0
votes
1answer
76 views

Proxmox VE: Multiple shared public IPs with NAT configuration

I have a Proxmox VE (v3.3 @ Debian 7 Wheezy) and got 3 public IPs routed to that server. It is my aim to have multiple VMs sharing those IPs using a NAT configuration so that I can forward single ...
0
votes
2answers
95 views

Forwarding HTTPs requests to another webserver

I have an Ubuntu 12.04 Server connected to two subnets. Eth0 is 20.20.20.1, it hosts an Apache Web Server on port 80. Eth1 is dynamic IP address in 10.10.10.0 subnet. This server is not a gateway ...
-1
votes
1answer
52 views

Can't set up the default route from a sublan to the WAN [closed]

I am trying to connect one of my PCs to the Internet via a WiFi network using a notebook. Here is my network : (Wifi) <=============> (Notebook) <===============> (Desktop) ...
0
votes
1answer
40 views

iptables with sticky forwarding/routing

My iptables is sticking. I have a DNS server behind IPTables and down a NAT'ed OpenVPN pipe. Using tcpdump I see DNS packets hit the outside router but it takes 4 or 5 DNS query attempts before the ...
0
votes
1answer
38 views

Keep source port for outgoing packets

I have 2 interfaces eth0(192.168.0.1) and eth1(10.1.1.15). And I do nat for all packets in this way. iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE Now I want to keep source port ...
0
votes
1answer
33 views

Proxmox with iptables nat is not available

I got an issue with iptables on my virtual machines. I installed proxmox 3.1-21 on my rootserver. I have around 6 IPs linked to my rootserver so i created new 'CT's. The problem is i need to ...
0
votes
0answers
40 views

Debian forward through NAT EOIP GRE

eth0 = WAN eth1 = LAN to forward any port through nat I use e.g: iptables -t nat -A PREROUTING -p tcp -d 79.188.31.34 --dport 8291 -j DNAT --to-destination 192.168.0.36:8291 and it works, but ...
0
votes
0answers
99 views

Linux router with multiple gateways and port forwarding

I want to use a Linux VM to act as several routers at once. I have multiple servers hosting different services and dedicated public IP for each of them. Super simplified setup example: Ubuntu ...
2
votes
0answers
105 views

Apache Instance in Private Subnet not returning packets

How can we get the Apache instance in a private subnet to work? Configuration Public subnet with 1 NAT instance Private subnet with 1 App instance Details 1. Masquerading is turned on NAT on via ...
0
votes
0answers
34 views

Should a NAT host be separate from a Bastion host

Have a private network with servers that required SSH access. Since the instances are in a private subnet, they cannot be accessed directly via SSH and require a public Bastion host to access. ...
0
votes
2answers
150 views

Using Router with DHCP and NAT and Windows Server 2012 as DNS

I have a network currently set up as per the image below. We use Regus's shared Internet and I've create a sub network for our office by using DHCP and NAT on the airport extreme router. Now the ...
0
votes
1answer
126 views

Port forwarding with iptables -> connection refused

I am trying to redirect requests to my local IP (10.42.42.152) on port 80 to a remote server, e.g. google.com (173.194.113.104:80). The remote server is up, ip_forward is enabled but I only get ...
2
votes
1answer
63 views

Stateless NAT with CentOS 6

I'm looking to set up the following: ---[IVR 1] | (internet)----[CentOS box]---+---[IVR 2] | ...
0
votes
0answers
35 views

tun0 not listening traffic on a simple vpn example

I tried to setup a simple vpn test server on Ubuntu 12.04, called ToyVPNServer. The guide is simple and I take test for days but still cannot get connected. The inspection result is showing the issue ...
0
votes
0answers
30 views

SRP521W Intervlan routing and NAT

I've a Cisco SRP521W router which I've set up with two VLANs called normal_Lan and SWSVLAN. I don't want devices on each VLAN to communicate with each other so I've turned INTERVLAN Routing OFF. ...
0
votes
0answers
65 views

Cisco 2901 Inbound NAT with local IP overload

Overview We are replacing a Juniper SSG on one of our networks with a Cisco 2901. Everything has so far been quite smooth except some issues have come up with external ports needing to be opened. ...
0
votes
0answers
97 views

Remote client (android) can't connect to OpenVPN sever behind LAN

My plan is to connect over tunnel (via Internet) android phone with my LAN at home. I set up OpenVPN server behind (router) lan (ip adress is 192.168.1.3). There is also my laptop. Port 1194 UDP on my ...
0
votes
0answers
37 views

NAT with port forwarding on same interface

I have some issues with the port forwarding on same interface. I have server1 with the public IP 5.1.1.1 and one company publish a MySQL database with IP 10.1.1.1 through VPN reached only by server1. ...
0
votes
0answers
37 views

How to use linux repository for setup (ubuntu) when box are in aws scenario 2 wizard created private subnet?

I know lots of questions and I have personally tried manual VPC creation multiple times until I gave to the wizard (NAT concept wouldn't stick). I thought the wizard would actually configure ...
0
votes
0answers
48 views

NAT Traffic via my instance in Microsoft Azure

I'm working in Azure IaaS Environment I have a private network 172.16.0.0/16 in which I have few linux instances running (172.16.0.1-5) My instances are accessing the public internet on port 80 (so my ...
-3
votes
1answer
37 views

What happens if all the ports of router(doing NAT) are occupied ? [closed]

Suppose n computer are connected to a router R .It is doing NAT but suddenly all of its ports are occupied .So when a new computer N tries to connect what would router do means it simple do not ...
0
votes
2answers
54 views

Connecting to OpenVZ Container that uses NAT

lets say i do not have enough IPs to allocate to each container, how would someone connect that container if it has no public address? (using NAT for that container) the address would be private ...