In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

-1
votes
3answers
68 views

Can not connect to the host itself

Well, the problem is simple. I have the site based on apache and trying to execute cron job at this site from the same server. Let's say my site http://example.com and cronjob is /usr/bin/curl http:/...
0
votes
3answers
38 views
+50

Redirecting traffic to a specific address and port using PF on MacOS

I want to pentest a mobile application. To do so, I want to intercept all WiFi traffic and forward it to Burp, which runs in a VM. I enabled "Internet Sharing" on my Macbook so my phone now connects ...
1
vote
2answers
32 views

Internal network can't see mailserver on public ip address Mikrotik

Please esxcuse my english as it is not my home language I have mailserver in my network behind a mikrotik router and firewall the problem that I'm having is that my mailserver is on a public ip ...
0
votes
1answer
27 views

yum HTTP Error 403 - Forbidden behind NAT on AWS

I had some weird issues while trying to run yum update on a centos 7 server on AWS behind an instance NAT. Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&...
0
votes
0answers
18 views

CISCO: Use Specific Outbound IP For Locally Initiated NAT-ed Connections

I have a CISCO 2911 router, multiple public IPs and few servers. I have setup my router (ROUTER1) to be accessible through internet-accessible public IP (lets say) 190.0.0.250 and its local IP to 10....
0
votes
1answer
26 views

Forward port and keep source IP

I have a system with a static IP address running several LXC containers. I can communicate with the containers over an interface as it would be a physical machine. One of this containers is a postfix ...
0
votes
0answers
89 views

iptables redirect packet nat

We currently run the following iptables rule: -A PREROUTING -d DSTIP -p udp -m udp --dport DSTPORT -m u32 --u32 "0x0>>0x16&0x3c@0x8=0xffffffff&&0x0>>0x16&0x3c@0xc=...
0
votes
1answer
18 views

Port Forwarding on Arris NVG599 results in “pinhole conflict detected”

I am helping a small business that won't buy an actual router or firewall and is using the Arris NVG599 that AT&T provided them. I have two port forwarding rules that need to be setup, 33891 > ...
0
votes
1answer
32 views

Prevent RRAS from NATing ALL interfaces to Public interface

I have installed and enable RRAS and NAT on Server 2012 R2 with 8 interfaces. I assumed I would be able to select WHICH of the remaining 7 interfaces got NATed, but it appears ALL interfaces are ...
3
votes
0answers
20 views

VPN between static IP address and dynamic and under NAT IP address [closed]

I have to connect two network like that: RemoteLan<-->Router3G/Firewall<-->INTERNET<-->Firewall<-->LocalLan So, I need to reach a device inside the RemoteLan from LocalLan. ...
17
votes
5answers
2k views

Are people really going to use public IPv6 addresses on their private networks? [duplicate]

I have been reading the Debian System Administrator's Handbook, and I came across this passage in the gateway section: ...Note that NAT is only relevant for IPv4 and its limited address space; ...
1
vote
1answer
31 views

Why IP masquerade (source NAT) in linux kernel fails to set source IP on high packet rates

I am trying to test throughput of the standard linux NAT. I have setup the following virtual network: [192.168.42.5] <--> [192.168.42.2:192.168.35.2] <--> [192.168.35.10] The middle ...
0
votes
0answers
22 views

Sonicwall inter WAN interface communication

I have the TZ105 sonicwall and X0 is LAN and the rest 4 interfaces are 4 different ISP connections through 4 ISP routers respectively. Basically I cannot get any device connected to an ISP router to ...
0
votes
1answer
24 views

Vyatta Destination NAT not working

We are running into an issue adding new IPs to a vyatta device after exceeding the limit of IPs in our first VRRP group. All of the IPs listed in the vrrp-group 1 work fine but any I add to vrrp-...
0
votes
0answers
7 views

Symmetric NAT with IPtables - TURN

I need to configure symmetric nat on two linux based ( openwrt ) gateways . I want to check if my TURN server is working correctly instead of STUN. How to perform that with IPtables ? echo "1" >...
0
votes
0answers
34 views

NAT'ing public IP through AWS VPN

I have a hardware VPN tunnel configured through Amazon Web Services (AWS), to a subnet which contains private instances behind an Elastic Load Balancer. I would like to have instances at the other end ...
-2
votes
2answers
28 views

What to do to enable SSH service on CentOS hosted in local Hyper-V? [closed]

I googled a lot but didn't help. So, I have another PC in my local network that has Windows Server 2012 R2. I enabled Hyper-V and initiated CentOS 7.2 and configured SSH server. The thing is I want to ...
0
votes
1answer
60 views

How to figure out why my NAT-box sends TCP RST packets?

TL;DR: I see that an ubuntu (which I have an absolute control of) host sends a packet under certain circumstances. How to find the application/kernel module responsible for that packet? I am ...
3
votes
1answer
50 views

Docker containers don't have internet access until docker service restarts

I'm creating a bridge manually, with this command: docker network create --driver bridge --internal --subnet=172.20.0.0/24 br0 Then i start containers using that bridge parameter --net=br0 --ip=172....
0
votes
0answers
10 views

How to use host internet which is using http_proxy?

I have a virtual machine which is connected to host with NAT and host only network. if my host is using open internet my guest(RHEL 7.1) can easily use host's internet. If my host is configured with ...
0
votes
0answers
18 views

iptables NAT with port forwarding

I have a Linux box acting as a NAT, with the following IPs: External network (eth0) - 128.123.xx.xx Internal network (eth1) - 10.1.0.1 (/24) I've got the basic NAT working, but now I need to forward ...
0
votes
0answers
16 views

OpenVPN server to forward traffic to client

I've set up OpenVPN on my Debian server. I want all traffic that goes on the OpenVPN server on port 65535 to route to a client's port. The client is connected to the server using OpenVPN. But the ...
0
votes
1answer
21 views

Exchange Server 2013, Database Availability Groups, NAT, and High Availability

Dilemma here I want a high availability/failover solution for people accessing outlook anywhere or exchange from outside the network. I have 2 exchange servers (EXCH1 and EXCH2) that have Exchange ...
0
votes
1answer
19 views

how to enable incoming connection from outside your home network, without a router?

I have a simple question. I dont have a router. i connect to the internet through a usb dongle or through hotspot from my android phone. The usb dongle connects to a 4g network, i use a prepaid sim ...
0
votes
1answer
21 views

Connecting two OpenVZ internal networks so containers can see each other

I have two OpenVZ Hosts with containers on them. This is the current layout: Host-A: (eth0 (connected to internet), eth1 (connected to Host-B)) Host-B: (eth0 (connected to internet), eth1 (connected ...
0
votes
1answer
56 views

How to NAT multiple Compute Engine Instances in Google Cloud?

We are spinning up Instance Groups that have an auto-scale policy. We have a need to make outbound connections to a server hosted in our Enterprise echo-system and they allow only whitelisted URLs. ...
2
votes
2answers
92 views

How can I connect remotely to our network from behind a double NAT?

Having successfully set up my home office network for remote access via OpenVPN, I would now like to do the same thing at work, however I am double natted. There is a central router maintained by ...
2
votes
0answers
49 views

IPTables DNAT Exemption

TL;DR - I'm looking for a way to send all my external traffic through a proxy server but not send all my internal traffic through a proxy server. How can I achieve this? My end goal is to forward ...
-2
votes
1answer
39 views

I can't access my home server using my public IP from local network [closed]

I've seen this question I can't access my public IP from local network but I think it's different I have a Vodafone Spain router from Huawei, model HG253sV2. In my local network I setup a HTTP ...
0
votes
1answer
32 views

unable to connect to webserver from LAN (access from outside is fine)

We would like to give both our customers and coworkers a single link (subdomain.ourdomain.com) to access a common web application. I set up a web server on a machine connected to LAN, it's accessible ...
0
votes
0answers
9 views

Convert 8.3+ NAT to 8.2 Cisco ASA

The following NAT rule setup works on 8.3+: nat (inside,outside) source static inside_net inside_net destination static vpn_net vpn_net no-proxy-arp route-lookup However, trying the same on 8.2(5) ...
0
votes
1answer
33 views

ACL NAT'ing on Cisco ASA 9.2

I'm trying to implement (P)NAT on a active/standby pair of 5525X running v9.2 I need to NAT an ACL not an object and I've been unable to work out how to do this. The ACL is access-list 3G_traffic ...
0
votes
0answers
26 views

Watchguard - Does SNAT and NAT Play together

Whilst I'm yet to try this because I'm affraid I'll loose access to my watchguards external interface I would like to know if the following scenario works? We currently have a bank of external IP's ...
0
votes
1answer
40 views

Centos 7 firewall-cmd settings not persisting

I have decided to do a bit of spring cleaning, and am doing a refresh of some of my underlying infrastructure. One of the critical components I am overhauling is the Network Gateway server. I updated ...
1
vote
1answer
129 views

UDP hole punching still required in IPv6, even without NAT?

Background (skip ahead for question) IPv4 needed NAT for address conservation. The firewalling properties of NAT were also beneficial for security. IPv4 NAT firewall rules are "block incoming packet ...
0
votes
0answers
25 views

IPsec with EC2 client and Elastic IP, but nat_traversal=no

After researching this quite a bit, I feel I may be asking the impossible here, but I thought I'd give it a shot. I'm trying to configure an Openswan IPsec client on an EC2 server (inside VPC, if it ...
1
vote
1answer
49 views

How to mangle IP addresses based on time using iptables

I want to change my IP addresses based on time not urls. Following is my iptable rule to mangle IPs I have : sudo iptables -t nat -A POSTROUTING -o em1 -p tcp --dport 80 -j SNAT \ --to ...
0
votes
0answers
10 views

Logging NAT translation errors on Cisco IOS router? (port scanning, bogus 'established' packets)

We have a NAT setup with port mappings to internal Webservers and DNS servers. If someone tries to connect, say, to port 22 (SSH), then those packets are dropped simply because there is no static NAT ...
0
votes
1answer
54 views

Two NIC must for RRAS VPN/NAT Server??

I am having one Server "windows server 2012 r2" with single NIC I have few client outside my network So, I need to configure RRAS server with VPN/NAT for remote client Does RRAS server required ...
0
votes
0answers
59 views

IPTABLES - Prerouting Issue - Port 443

I have a NAT server setup with 4 servers behind it. I have a PREROUTING entry to allow https/443 INTO my environment, specifically to to a web server running IIS on port 443. This works fine. ...
0
votes
1answer
68 views

why teredo IP Address keep changing?

I managed to configure teredo on windows 7 but I come up with one problem ... teredo IP address keep changing . I noticed that terendo stat keep change too , it moving from dormant to enabled and ...
0
votes
1answer
33 views

Nat or Static Route in pfsense

I installed PFsense on VMware with two interfaces. 1.WAN -> 192.168.1.110 ->Bridge Getaway->192.168.1.1=>Modem IP 2.LAN -> 10.1.1.1 ->LAN Segment how config Nat and ...
2
votes
1answer
50 views

Can't access server on loopback address, only on private address

I am running a rails web app server bound to 0.0.0.0 on port 80 like so: sudo rails s --port=80 --bind=0.0.0.0 I can access it at my private address http://192.168.0.13/, normally I can access at ...
0
votes
1answer
41 views

Forward outgoing traffic for port to another server using iptables

I'm trying to forward outgoing traffic 194.97.114.3:2010 to another server but with no luck. netstat -anup gives me udp 0 0 94.23.28.183:44174 194.97.114.3:2010 ESTABLISHED ...
-1
votes
2answers
35 views

iptables for internet connection sharing

Objective: I am working on an embedded Linux device with the following network configuration. Interface-1: 'wlan0' acts as an access point. Interface-2: 'eth1' connected to Internet. Interface-3: '...
0
votes
0answers
18 views

Turn-key VPN setup to make server behind firewall accessible

I am looking to a solution for a following problem - on a location A, I am allowed to use as much bandwidth as required, with the caveat that I am constantly behind a firewall without a public IP ...
0
votes
1answer
26 views

Cisco 1921, SMTP, and NAT on multiple Exchange Servers

In a LAN environment, I have 3 exchange servers that have been deployed for high availability and failover in case one of the 3 servers becomes unavailable. Currently, my NAT settings only send ...
0
votes
0answers
36 views

OpenVPN NAT gateway on Debian, no traffic

My Debian server is successfully configured to connect to "HideMyAss", using OpenVPN, has internet access, receives HMA IP and still sees the computers on the LAN. I'm trying to configure the other ...
0
votes
2answers
90 views

Can a DNS server uniquely identify a specific client device behind a NAT?

I've been playing around with this Netflix Proxy setup (https://github.com/ab77/netflix-proxy), and I noticed that it might be possible to use the DNS endpoint to function like a hotspot with a walled ...
0
votes
0answers
28 views

VoIP NAT to connect to companies of the same ip address range together

I am currently using packet tracer to configure the network for Company A. I have configured DHCP and telephony service successfully but the problem I'm facing is when company A tries to contact ...