In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

0
votes
0answers
11 views

Virtualbox NAT Network: Proxying a port for SSH is inconvenient [closed]

I want to be able to SSH into a VM Guest of Virtualbox where the guests are sharing a NAT Network. LocalNat Portforwarding (See https://www.pythian.com/blog/test-lab-using-virtualbox-nat-networking/ ...
-3
votes
0answers
25 views

Hosting a server - problems [closed]

My IP in ipchicken.com differs from the one reported by my router which is 100.64.x.x. The IP in ipchicken.com is the real one. Since the IP in my router changed to 100.64.x.x, people can't access my ...
2
votes
1answer
36 views

Can't access server on loopback address, only on private address

I am running a rails web app server bound to 0.0.0.0 on port 80 like so: sudo rails s --port=80 --bind=0.0.0.0 I can access it at my private address http://192.168.0.13/, normally I can access at ...
0
votes
1answer
25 views

Forward outgoing traffic for port to another server using iptables

I'm trying to forward outgoing traffic 194.97.114.3:2010 to another server but with no luck. netstat -anup gives me udp 0 0 94.23.28.183:44174 194.97.114.3:2010 ESTABLISHED ...
-1
votes
2answers
28 views

iptables for internet connection sharing

Objective: I am working on an embedded Linux device with the following network configuration. Interface-1: 'wlan0' acts as an access point. Interface-2: 'eth1' connected to Internet. Interface-3: ...
-1
votes
0answers
68 views

open port 443 in a double NAT system

i'm new there, i hope you can help me i own a network so configured: 2 WANs <> router <> firewall <> LAN i use a double NAT system for a WAN, that has a static IP. i reach to navigate by ...
0
votes
0answers
8 views

Turn-key VPN setup to make server behind firewall accessible

I am looking to a solution for a following problem - on a location A, I am allowed to use as much bandwidth as required, with the caveat that I am constantly behind a firewall without a public IP ...
0
votes
1answer
15 views

Cisco 1921, SMTP, and NAT on multiple Exchange Servers

In a LAN environment, I have 3 exchange servers that have been deployed for high availability and failover in case one of the 3 servers becomes unavailable. Currently, my NAT settings only send ...
0
votes
0answers
24 views

OpenVPN NAT gateway on Debian, no traffic

My Debian server is successfully configured to connect to "HideMyAss", using OpenVPN, has internet access, receives HMA IP and still sees the computers on the LAN. I'm trying to configure the other ...
0
votes
2answers
59 views

Can a DNS server uniquely identify a specific client device behind a NAT?

I've been playing around with this Netflix Proxy setup (https://github.com/ab77/netflix-proxy), and I noticed that it might be possible to use the DNS endpoint to function like a hotspot with a walled ...
0
votes
0answers
25 views

VoIP NAT to connect to companies of the same ip address range together

I am currently using packet tracer to configure the network for Company A. I have configured DHCP and telephony service successfully but the problem I'm facing is when company A tries to contact ...
3
votes
1answer
120 views

Create a multi-homed linux load balancer with two internet connections and one LAN connection

OK,... this has possibly been answered, unfortunately, I have not found anything that looks like it might be the resolution. Ive looked at these pages and they have some useful information, but not ...
0
votes
1answer
17 views

Connecting to Azure Server hosted website via NAT'ed address

I have an Azure server with multiple websites published through IIS and I am wondering if there is a way to change the URL outside clients connect to without changing the name of the server. I have ...
1
vote
0answers
25 views

cisco asa public server nat issue

I have been tasked with some ASA configuration coming in a few weeks, and to test out some configuration options I have setup a web server on my local network which I would like to be able to access ...
0
votes
0answers
24 views

Transferring data to Active FTP server fails from DMZ but works fine from LAN

I know there are a ton of similar questions already, but I've read through just about everything I could find and am still having trouble resolving my specific issue. Problem: I am having difficulty ...
0
votes
0answers
19 views

Cisco asa 8.4 PAT with static NAT

I am trying to make sense of the changes that Cisco has made to NAT on ASA > v8.3. I have a network which is being PAT'd to the outside interface address, and want to add a static NAT from the outside ...
0
votes
0answers
52 views

iptables: Redirect traffic from destination IP to new IP

I have a PC client. I like to redirect outgoing TCP connections on port 80 with the target IP 1.1.1.1 to the target IP 2.2.2.2. The full connection should be redirected, which means also the answer ...
2
votes
1answer
51 views

Forward SSH to another Host

I have an ubuntu server which is visible from internet, let's call it "jumper". And this server has this name actually because I need that whenever an user SSH this server, it jumps (or forward or ...
0
votes
0answers
36 views

Prerouting with iptables, destination port to DHCP ip

I have an iptables rule that translates requests to the same IP from different internal hosts by changing the source port. iptables -t NAT -A POSTROUTING -p TCP -d 173.32.1.2 --dport 873 \ -m state ...
0
votes
0answers
18 views

Hairpin NAT with dynamic WAN IP [migrated]

I have a dynamic WAN IP so if it changes my iptables will no longer apply. Here is my working hairpin nat, where x.x.x.x is my WAN IP br0 - LAN eth1 - WAN -A PREROUTING -d x.x.x.x -p tcp --dport ...
1
vote
1answer
24 views

Getting SIP, RTP and NAT right : who is doing what?

I'm a little confused about who (PBX vs. phones) is doing what in our IP telephone setup. We have our phone system hosted externally. This means that we've got physical IP telephones installed at ...
0
votes
0answers
18 views

Does IKEv2 (Windows Client) require the client firewall to perform NAT-T?

I am kind of new to IPSec VPNs. I am trying to set up an IPSec implementation using libreswan with IKEv2 for road warriors. Being road warriors these clients will likely be behind their home ...
0
votes
0answers
19 views

Kamailio as TCP-only SIP register and relay

I have a rather complicated setup in which I'd like to run a SIP server. In general, I want to run an IPv6-only Kamailio SIP-server on internal network and have outside SIP-clients be able to make ...
3
votes
2answers
75 views

Ubuntu as NAT Gateway with iptables

I'm trying to configure Ubuntu 14.04 to act as a NAT gateway between a private and public network. Public Interface -> eth0 (178.x.x.x) Private Interface -> eth0:0 (192.168.206.190/17) I've tried ...
0
votes
1answer
30 views

Squid and internet sharing proxy without configurations on the part of end users

We have several PCs all connected to a switch; What I need from Squid is to share the internet between everyone and at the same time gives me control over what PC can access to internet (password ...
1
vote
1answer
48 views

How can I access to devices on remote LAN

Here is a quick diagram of what i'm trying to configure I have multiple clients connecting to my VPN Server (from 10.0.1.2 to 10.0.25.2). Each LAN behind the clients are always the same : ...
0
votes
0answers
44 views

Route all the trafic using iptables nat in linux

I'd like to route all the trafic through iptables NAT in linux, I'd like to route all the traffic through TOR. My script is accepting only TCP and UDP protocols, but I need to route all the protocols ...
0
votes
0answers
108 views

IPTables - Redirect ppp0 traffic to external side eth0

I've some servers on 2 differents networks. On the first network ( many servers ), I've only one public IP adress (ex: 193.193.192.192) and a small local network ( 172.16.1.0/24 ) ; On the second ...
1
vote
0answers
67 views

Linphone iOS behind CGNAT sets wrong Contact Header

We are using Linphone client on iOS over Verizon network. Our client sends wrong IP address on Contact header at 200 OK message as a response to INVITE message from Asterisk. SIP trace Our client's ...
0
votes
0answers
16 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
1
vote
1answer
30 views

RRAS NAT not forwarding for specific Hyper-V VM's

I have a Windows Server 2012 R2 installation, with Hyper-V, RRAS and NAT setup. I'm having an issue with two of my VM's and RRAS NAT: Essentially, these two VM's will not communicate outside the ...
0
votes
0answers
12 views

Capture no-modified packet with iptables

I have a user-space program in which I process packets. I send them there with help of iptables. The problem is that I capture not original packet but modified. I have wlan0 interface up with access ...
0
votes
0answers
20 views

Cannot access webserver on host machine using Vagrant and Apache [duplicate]

I installed Vagrant and installed CentOS7 with apache, when i tried accessing the web server using browser (localhost:8080), it keeps showing the status "waiting for localhost" and never render the ...
0
votes
0answers
23 views

firewalld multiple public ips to multiple private ips routing

I'm trying to use CentOS 7 server as a firewall/nat for some sensitive servers on the LAN. The CentOS server has multiple public IPs (one per box on the LAN) and I'm trying to associate each external ...
1
vote
1answer
26 views

Forwarding ports from one bridged interface to a guest container on host OS

I have a simple configuration. Mind map how everything look like So I have a structure: Proxmox Host OS (vmbr0, vmbr1) Container 1 (eth0) Container 2 (eth0) The Proxmox networks: vmbr0 ...
0
votes
0answers
18 views

Is it possible to translate this iptables PAT to windows server netsh ip nat?

I have this rule from iptables: iptables -t nat -A POSTROUTING -s 10.30.0.0/16 -d 65.1.7.2 -j SNAT --to-source 192.168.4.5 Is it possible to do this under windows server? I know there is the netsh ...
1
vote
2answers
46 views

Do NATs rewrite ipAddress in payload of ICMP packets?

Today when I test running a tracert command (windows + Wireshark) I see a outbound ICMP_ECHO_REQUEST packet that has sourceIP as "192.168.1.55" - my local IPAddress. It is followed by a ...
1
vote
2answers
38 views

NAT for VPC will not allow internet access

I'm trying to hook up my private subnet postgres cluster to have internet access without being publicly accessible. My setup is as follows: I have a VPC 10.1.0.0/16 with 4 subnets: Postgres Subnet ...
1
vote
0answers
24 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
1
vote
1answer
64 views

Iptables : forwarding SSH traffic according destination IP

I have 2 servers : One that receives connections from outside my LAN and another (inside the LAN) that I aim to access from outside via ssh. There are prerequisites : I can't access to my SSH services ...
0
votes
1answer
53 views

Mikrotik: any way to nat one public IP to another public IP?

Is there a way to do a simple task, NAT from one public IP and specific port to another public IP and another port, reason to do this is that 2nd IP is blocked by our client's ISP, and the 1st IP (on ...
0
votes
1answer
41 views

Allow UPnP and NAT-PMP request in iptables

I have an OpenVPN gateway setup with forwarding which works great. My other machine connects through it and reaches the internet. Done an external port scan and no ports are visible on the external ...
0
votes
1answer
43 views

iptables counters in NAT table and state NOT NEW

I read everywhere that it is dangerous to do traffic filtering in the nat table because the nat table is only consulted for connections whose state is "NEW" (later packets bypass the table). Does it ...
0
votes
0answers
46 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
1
vote
1answer
23 views

How to perform NAT with inside interface as bridge

(dublicate question from AskUbuntu) I have a following network diagram: network diagram 192.168.0.0/24 network with 4 web servers (.1,.2,.3,.4). There are 2 Ubuntu 14.04 (VM1 and VM2) in it. They ...
0
votes
1answer
50 views

Site-to-Site VPN with NAT

We need to configure Site-to-Site VPN with our customer. Our local subnet: 192.168.16.0 / 24 VPN configuration: Remote Subnet: 192.168.44.0 / 24 Local Subnet: 192.168.93.200 / 29 As you can see ...
0
votes
0answers
66 views

Elastix behind Proxmox, web interface of Elastix can't open

I have a PVE server with one public IP address, I want to host services on the private IP address, and do NAT and Port-forwarding to redirect the traffic to the VMs with private IP address. I was able ...
0
votes
0answers
17 views

IPTables debugging

I've got a weird problem. I've got a primary host in Nevada and a satellite site in Maryland. They both use the 192.168.21.0/24 subnet (as well as .18.0 and .101.0) and have some overlapping ...
0
votes
0answers
14 views

Problems with Mobile IP VPN and aitwach / app

i have this setup: Some Android devices configured with IP Range: 192.178.10.X - connected over 3G with Mobile IP VPN (mobile IPSEC Tunel / VPN). Endpoint is a static ip. My router configuration ...
1
vote
1answer
36 views

Webservers on multiple subnets behind NAT and DNS

I run a Sonicwall TZ205, and I have different LAN segments setup using ports. I then run multiple VMware servers connected to these ports, and multiple VM guests connected to each vSwitch. I have some ...