In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

0
votes
0answers
51 views

Route all the trafic using iptables nat in linux

I'd like to route all the trafic through iptables NAT in linux, I'd like to route all the traffic through TOR. My script is accepting only TCP and UDP protocols, but I need to route all the protocols ...
0
votes
0answers
178 views

IPTables - Redirect ppp0 traffic to external side eth0

I've some servers on 2 differents networks. On the first network ( many servers ), I've only one public IP adress (ex: 193.193.192.192) and a small local network ( 172.16.1.0/24 ) ; On the second ...
1
vote
0answers
140 views

Linphone iOS behind CGNAT sets wrong Contact Header

We are using Linphone client on iOS over Verizon network. Our client sends wrong IP address on Contact header at 200 OK message as a response to INVITE message from Asterisk. SIP trace Our client's ...
0
votes
0answers
20 views

Openswan to Cisco ASA IPSec tunnel - specific IP address range required. Netmap?

I'm attempting to set up a VPN tunnel between a Cisco ASA 5520 and an Openswan server running on Ubuntu 14.04 on a Amazon VPC instance. I do not have access to the ASA, and have been given the ...
1
vote
1answer
35 views

RRAS NAT not forwarding for specific Hyper-V VM's

I have a Windows Server 2012 R2 installation, with Hyper-V, RRAS and NAT setup. I'm having an issue with two of my VM's and RRAS NAT: Essentially, these two VM's will not communicate outside the ...
0
votes
0answers
12 views

Capture no-modified packet with iptables

I have a user-space program in which I process packets. I send them there with help of iptables. The problem is that I capture not original packet but modified. I have wlan0 interface up with access ...
0
votes
0answers
20 views

Cannot access webserver on host machine using Vagrant and Apache [duplicate]

I installed Vagrant and installed CentOS7 with apache, when i tried accessing the web server using browser (localhost:8080), it keeps showing the status "waiting for localhost" and never render the ...
0
votes
0answers
27 views

firewalld multiple public ips to multiple private ips routing

I'm trying to use CentOS 7 server as a firewall/nat for some sensitive servers on the LAN. The CentOS server has multiple public IPs (one per box on the LAN) and I'm trying to associate each external ...
1
vote
1answer
30 views

Forwarding ports from one bridged interface to a guest container on host OS

I have a simple configuration. Mind map how everything look like So I have a structure: Proxmox Host OS (vmbr0, vmbr1) Container 1 (eth0) Container 2 (eth0) The Proxmox networks: vmbr0 ...
0
votes
0answers
20 views

Is it possible to translate this iptables PAT to windows server netsh ip nat?

I have this rule from iptables: iptables -t nat -A POSTROUTING -s 10.30.0.0/16 -d 65.1.7.2 -j SNAT --to-source 192.168.4.5 Is it possible to do this under windows server? I know there is the netsh ...
1
vote
2answers
49 views

Do NATs rewrite ipAddress in payload of ICMP packets?

Today when I test running a tracert command (windows + Wireshark) I see a outbound ICMP_ECHO_REQUEST packet that has sourceIP as "192.168.1.55" - my local IPAddress. It is followed by a ...
1
vote
2answers
44 views

NAT for VPC will not allow internet access

I'm trying to hook up my private subnet postgres cluster to have internet access without being publicly accessible. My setup is as follows: I have a VPC 10.1.0.0/16 with 4 subnets: Postgres Subnet ...
1
vote
0answers
25 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
1
vote
1answer
71 views

Iptables : forwarding SSH traffic according destination IP

I have 2 servers : One that receives connections from outside my LAN and another (inside the LAN) that I aim to access from outside via ssh. There are prerequisites : I can't access to my SSH services ...
0
votes
1answer
71 views

Mikrotik: any way to nat one public IP to another public IP?

Is there a way to do a simple task, NAT from one public IP and specific port to another public IP and another port, reason to do this is that 2nd IP is blocked by our client's ISP, and the 1st IP (on ...
0
votes
1answer
67 views

Allow UPnP and NAT-PMP request in iptables

I have an OpenVPN gateway setup with forwarding which works great. My other machine connects through it and reaches the internet. Done an external port scan and no ports are visible on the external ...
0
votes
1answer
46 views

iptables counters in NAT table and state NOT NEW

I read everywhere that it is dangerous to do traffic filtering in the nat table because the nat table is only consulted for connections whose state is "NEW" (later packets bypass the table). Does it ...
0
votes
0answers
61 views

StrongSwan IPsec and NAT

I have an IPSec tunnel to the network of our customer running on a Linux box with StrongSwan. On there I have to do source NAT to translate our network addresses to the subnet they assigned us. This ...
1
vote
1answer
23 views

How to perform NAT with inside interface as bridge

(dublicate question from AskUbuntu) I have a following network diagram: network diagram 192.168.0.0/24 network with 4 web servers (.1,.2,.3,.4). There are 2 Ubuntu 14.04 (VM1 and VM2) in it. They ...
0
votes
1answer
59 views

Site-to-Site VPN with NAT

We need to configure Site-to-Site VPN with our customer. Our local subnet: 192.168.16.0 / 24 VPN configuration: Remote Subnet: 192.168.44.0 / 24 Local Subnet: 192.168.93.200 / 29 As you can see ...
0
votes
0answers
76 views

Elastix behind Proxmox, web interface of Elastix can't open

I have a PVE server with one public IP address, I want to host services on the private IP address, and do NAT and Port-forwarding to redirect the traffic to the VMs with private IP address. I was able ...
0
votes
0answers
17 views

IPTables debugging

I've got a weird problem. I've got a primary host in Nevada and a satellite site in Maryland. They both use the 192.168.21.0/24 subnet (as well as .18.0 and .101.0) and have some overlapping addresses....
0
votes
0answers
14 views

Problems with Mobile IP VPN and aitwach / app

i have this setup: Some Android devices configured with IP Range: 192.178.10.X - connected over 3G with Mobile IP VPN (mobile IPSEC Tunel / VPN). Endpoint is a static ip. My router configuration (...
1
vote
1answer
38 views

Webservers on multiple subnets behind NAT and DNS

I run a Sonicwall TZ205, and I have different LAN segments setup using ports. I then run multiple VMware servers connected to these ports, and multiple VM guests connected to each vSwitch. I have some ...
0
votes
1answer
31 views

Establishing new IP address when launching multiple instances of the same Oracle VirtualBox image

I've created a new Oracle Virtual Box image and exported it to an "Open Virtualization Format Archive" (ova file). The original image used "NAT" settings. I've since changed it to "Bridged Adapter" ...
0
votes
1answer
27 views

Log all forwarded traffic to new server with iptables

I rerouted all internet traffic from my old Debian 7 server to my new server with DEST_IP=123.123.123.123 for p in 25 110 143 587 993 995 80 443; do iptables -t nat -A PREROUTING -i eth0 -p tcp --...
2
votes
0answers
56 views

Cisco 2851, nodes on local network can access Internet but router can't [closed]

I am using a 2851, on GE0/1 I have a BT OpenReach VDSL modem and GE0/0 goes to a switch and the rest of my network. The desired configuration is pretty straight forward and mostly works, I want the ...
1
vote
0answers
61 views

Proper NAT/routing configuration for device-wide iON VPN (using NETunnelProviderManager)

I am trying to set up a VPN server environment to work with the test program provided by Apple called SimpleTunneler, which uses NETUnnelProviderManager introduced in iOS 9.0. For the server portion I ...
0
votes
0answers
26 views

Translating Cisco ASA nat rules to Palo Alto fw

So we're going to be replacing a cisco ASA with a plao alto firewall and because of reasons, testing ahead of time is not exactly a thing. So I'm setting up the config on the palo alto ahead of time ...
0
votes
1answer
49 views

Is my gateway a fixed or a dynamic IP?

I have some virtual machines under my control with Azure, some of them have public IP and some of them don't. In regards to the one that don't: I can see that they still have internet outbound (not ...
0
votes
1answer
53 views

Bridged networking on VM host and hairpin NAT

I have one host running Proxmox VE. I set up 3 virtual bridges vmbr[0-2] to handle my networking needs: vmbr0 runs directly on the main interface for VMs with public IPs, vmbr1 allows for NATed VMs, ...
0
votes
0answers
42 views

Remote Desktop Connection fails after logging on and off sucessfully

this one has me scratching my head. I've been RDP'ing into a remote server running Windows Server 2008 R2 successfully for a long time. Recently I tried to add a VPN role to the server but when I ...
0
votes
0answers
32 views

Can Someone Explain Why this firewalld Command Does Not Work as Expected?

matiu asked the question of how they can do port forwarding for a single source IP address. You can read the original question here. I provided the following commands as an answer. I based my answer ...
0
votes
2answers
42 views

Asterisk One Way Audio or No Inbound Calls

I have an Elastix server running in Amazon Web services, but I can't seem to resolve an issue that is causing either one way audio or no inbound calls to ring. If I set my SIP extensions to "Nat = ...
0
votes
0answers
14 views

Static NAT Issue

I have a server inside my network that I want users to be able to access from the outside. To this end, I have setup a static nat between my internal address for this server (10.7.64.27) and one of ...
0
votes
0answers
29 views

IPTables SNAT and DNAT - How to choose correct IP Address?

I have a physical host on which I run some virtual machines. IPTables is fully open and unconfigured but I add the following rule so the VMs can access the internet: iptables -t nat -A POSTROUTING -s ...
0
votes
0answers
65 views

NAT for LXC Containers Debian 8 - no connection

I have a Debian 8 server running on a physical host machine. To seperate some services, I have created a lxc container (also debian 8). I am currently trying to set up a working NAT so my lxc ...
1
vote
1answer
76 views

Linux Virtual Server: NAT return path

I'm trying to set up a LVS load balancer in front of my Kubernetes: Calico is used as container network, so every pod has its own network interface in it's host. External IPs, routes and routing rules ...
0
votes
1answer
115 views

Connecting to an AWS RDS behind a NAT with an SSH tunnel

I've set up a MYSQL RDS on AWS, in a private VPC behind a NAT. With Workbench, I can connect successfully from a remote client into the RDS no problems - so all of the RDS, the NAT and the security ...
1
vote
0answers
48 views

iptables/nat/prerouting ignores UDP packets?

The same effect on many servers with various kernel versions. There are multiple Iptables DNAT rules: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 12345 -j DNAT --to-destination 10.20.30....
1
vote
0answers
118 views

What's your experience with the AWS NAT Gateway performance?

In December/2015 Amazon launched their VPC NAT Gateway service which is basically a managed alternative to creating your own (and it looks very good in comparison to NAT instances). I was just about ...
0
votes
1answer
48 views

Forwarding IPs to Switch for NAT

I have a Question. We actually have a Cisco 1812 Router and we're Switching to an ASA 5512-X. The Problem is, the ASA 5512-X only has 6 Ports. The 1812, had 8. All in use. We need to translate 3 ...
0
votes
2answers
59 views

AWS Structure: can NGINX be NAT?

I working on my project structure based on AWS. And figure out the best suitable for me: http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/images/aeb-vpc-rds-topo.png But all my instances ...
-3
votes
3answers
31 views

How am I able to let my 2 PC over internet see one another as if they are on the same network segment? [closed]

How am I able to let my 2 PC over internet see one another as if they are on the same network segment?
2
votes
1answer
242 views

ASA 5510 Secondary Public IP Range on outside interface

We are in process of upgrading from an ASA5505 to an ASA5510. I have a co-location configured for 3 ranges of public IP addresses on two different subnets. The 5505 is working as expected. Example (...
0
votes
1answer
152 views

Watchguard, accessing server with public IP from internal network

I can't go trough it. I need access from my internal network to a server with public IP. I have private network with few VLANs, and then I'm using Watchguard m400 firewall. The server, that I want to ...
1
vote
1answer
74 views

Iptables DNAT single port

I'm trying to redirect a single port to a local server via IPtables. Currently I have the following rules: iptables -t nat -A PREROUTING -p tcp -m tcp --dport 55555 -j DNAT --to-destination 10.188....
1
vote
2answers
65 views

Public IP is appearing while tapping network instead of private IPs

In my test environment, I connected a tap switch in front of the wireless router. This tap has 5 ports and port 5 is the mirror port which is connected to a computer. At port 1, modem is connected, ...
0
votes
1answer
174 views

How to mapping ports from a single public IP to multiple internal servers in Fortigate Firewall?

I have one public IP and I want to use it for 3 servers behind Fortigate Firewall, two for RDP and one for Mail server. I can NAT one public ip to one private local ip but I can not NAT to Multiple ...
1
vote
1answer
80 views

STUN server does not return IP address and Port

I am just getting started with STUN (for use with WebRTC). I installed STUN client on ubuntu (sudo apt-get install stun). I am sitting behing a NAT. I tried to get my IP address and port using a ...