In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

1
vote
1answer
32 views

Linux: NAT from lan to a bridge results in erroneous nat between bridge components. How to fix?

Consider a machine with 3 NIC's. Two bridges are active; from eth1 to a vlan on eth0 and from eth3 to another vlan on eth0. Interfaces: auto lo iface lo inet loopback auto eth0 allow-hotplug eth0 ...
1
vote
0answers
97 views

RRAS IKEv2 Behind Router

I have an installation of Server 2012 R2 running that I need to deploy an IKEv2 VPN on. It's my way of accessing files at my office. The current setup involves a NAT Router (Just a standard ISP-...
-2
votes
1answer
47 views

VPN connection between two computers both masqueraded by symmetric NAT devices [closed]

How to establish a VPN connection between two computers both masqueraded by symmetric NAT devices without a public IP? I suppose ICE technique with TURN or RSIP protocol should be used in order to ...
-5
votes
1answer
32 views

Mirotik : Client from interface 1 cant access client from interface 2

I have a mikrotik here. Both interface 1 and 2 have same network (10.10.30.0) and dhcp pool. I can ping any client on interface 1 from mikrotik and also any client on interface 2. But I cant use to ...
-3
votes
1answer
270 views

sftp not working, but ssh is working [closed]

I have a nat rule in my firewall to allow port 22 traffic through pfsense. I am able to SSH into my server but sftp through filezilla is getting timed out and not connecting. I tried with the local ...
3
votes
1answer
231 views

Logging NAT mappings on a Mikrotik router

I am looking for suggestions on how to configure a Mikrotik router to log NAT session setup and ideally teardown. However, setup only is sufficient for my immediate needs. I found a method to log ...
-4
votes
2answers
48 views

Two different locations running as one on server? [closed]

I am with a new company, and I am trying to make sure I am understanding the way it is set up on the server. There are 2 locations, and the second location is connected to the network and Server (...
1
vote
1answer
92 views

Unable to access IP addresses within my own country. pfSense showing packets hit WAN

I have a pfSense firewall that has a WAN with multiple public IP addresses. I use NAT to port forward certain external IPs to internal IPs. I can connect from anywhere except same country. When ...
0
votes
2answers
221 views

WatchGuard, external IP, different port

I have few external IP addresses, but I want to use one, and NAT to it different PC's. That's how it should look like. 123.123.123.123 that's my IP, and I want to have on it 3 PC's on different ...
0
votes
0answers
13 views

Using DNAT with IPtables

I am trying to figure out a DNAT issue and I am hoping I can get a hand. Basically I have a OpenVZ box that connects to my LAN via the SoftEther Client. What I am trying to accomplish is a way to ...
1
vote
1answer
112 views

Cisco ASA - Allowing external access to a secure server via RDP

I am new to the forums and really hope someone can help me. I am pulling my hair out! I have posted on both the Cisco forums and Windows forums in hopes anyone can suggest something but no one has ...
1
vote
0answers
40 views

Couchbase XDCR through proxy or NAT

I am trying to set up two clusters of Couchbase with XDCR, one in AWS and one in our client's enterprise network. Normally, for each cluster, I would set up each node using its private IP. But, in ...
1
vote
2answers
245 views

How does Pinging from a private IP behind NAT to a public IP work

Recently I realized that ICMP does not contain any ports, so I tried to Ping from my wireless connected laptop to public IPs(of course it worked!). In a typical configuration, a local network ...
2
votes
1answer
48 views

How to mimic “DMZ Host” or “Default Host” NAT funcionality with iptables?

My previous DSL modem had a function called "DMZ Host" (which in other platforms seems to be named Default Host). When you select a computer in your network to be the DMZ Host, it forwards every non-...
0
votes
2answers
92 views

How can I DNAT a packet coming through a bridge back to its source with iptables? [duplicate]

I have a host1 that has a WAN interface eth0 (1.2.3.4) and a LAN interface eth1 (10.41.82.1). Inside the LAN is a host2 with the IP address 10.41.82.2. Incoming connections to 1.2.3.4:22 are ...
1
vote
2answers
58 views

TFTP for libvirt hosts behind NAT

This has taken me all day to work out, so I thought I would get this recorded here! I have a LibVirt host with NAT instead of bridging for the hosted virtual machines, using the default IPTables ...
0
votes
0answers
23 views

Linux Iptables Nat with two gateway

I got a CentOS server in a DMZ that act as a DHCP and DNS server with the following network configuration: eth0 IP: 192.168.100.50 SN: 255.255.255.0 GW: 192.168.100.1 Now I added a seconde network ...
0
votes
1answer
87 views

When I ping local IP address I get a reply from external IP

I have SonicWall NSA 2400. Port X2 is WAN port with following settings X.X.X.250 / 255.255.255.248. I connected VPN concentrator to port X5, which is assigned to DMZ zone in Transporarent IP Mode for ...
0
votes
1answer
52 views

AWS NAT instance as OpenVPN Client can't route instances behind it

I have an Amazon AMI 2015.09 instance as a NAT server for my backend servers. I have configured the OpenVPN client on this same box, the NAT server is able to talk to everything over VPN, all ...
0
votes
0answers
25 views

Direct native traffic TCP file transfer between two NATted machines

Aim: I want to perform the fastest possible TCP based file transfer between two machines sitting behind two different NATs, in a situation where a public port cannot be redirected to any of the two ...
0
votes
0answers
17 views

One-to-One NAT with Firehol

I use firehol to manage iptables on Ubuntu 12.04. I am trying to set up one-to-one NAT so requests from the internet and my LAN to one of my public IP addresses goes to a specific server. Here is what ...
0
votes
1answer
88 views

Assign WAN IP on internal NAT network

I have a static WAN IP address (in the example 77.88.99.166) that is provided by a DSL modem that also has a static IP address (77.88.99.165). The modem interfaces with a firewall/NAT router (green) ...
0
votes
0answers
45 views

How to connect extensions of remote VOIP over remote STUN server?

Image of Architecture I am trying to setup I have configured the Asterisk server in a docker image and it's running, I have also configured the STUN/TURN server and it's also running on the same ...
0
votes
2answers
48 views

How to route requests through router based on domain names?

Assuming a setup as seen below, is it possible to route requests for e.g. subdomain1.domain.com to Server 1, subdomain2.domain.com to Server 2, another seconddomain.com to Server 2 etc. without ...
0
votes
2answers
105 views

How to connect a client behind a NAT router to an Asterisk server behind a NAT router?

I have an asterisk setup on a server. The local IP address is 172.22.9.200 and extenal IP address is 75.45.185.100. My client device is an android phone that is connected to a router and it which ...
1
vote
1answer
137 views

How to get around Double NAT from the ISP?

I have a client located in a rural area where they are using the ISP Xplornet, it's a wireless/satellite type of internet connection. After initial setup, We where able to have access to the site ...
0
votes
0answers
17 views

Iptables vm no outbound connections

I'm currently running Proxmox with a couple of vms. Unfortunatly i only got 1 public ip so i tried to work with nat. Problem is, i can't get outbound connection from my vms. Inbount connections to the ...
0
votes
0answers
32 views

NAT failed when DirectAccess Enabled

I have this topology: I have 192.168.1.0/24 as private network, 20.1.1.0/24 and 100.1.1.0/24 as Public Network. WinDC is the Domain Controller and Winrtr is Router. The ISP act as outside DNS and ...
0
votes
0answers
113 views

TCP RST/ACK packets not being sent back to NAT client with Forefront TMG

With Forefront TMG, we have an issue where all TCP connections to allowed ports work just fine when the connection is accepted with SYN/ACK, but when they are rejected with RST/ACK, the response does ...
1
vote
1answer
93 views

Setting up Amazon elastic beanstalk to be accessible through fixed ip address(not CNAME)

I want to deploy my app to multi-container elastic beanstalk to be able to point my A-record to some fixed ip connected to it(somehow). I've read related questions(like this one) and understand that ...
0
votes
0answers
12 views

iptables avoiding chain's rules on nat table

I have lots of SNAT rules on HTTP (port destination 80) traffic in my POSTROUTING chain of the nat table. I'm trying to reduce the processing cost by adding a rule that filters out the non-HTTP ...
0
votes
1answer
117 views

Amazon Linux - iptables NAT rules not matching GRE traffic

I'm trying to prototype something in AWS VPC/EC2, but I can't get my NAT rules to work. I have the following setup (all instances running the Amazon Linux AMI): GRE Tunnel between instances 10.0.0....
0
votes
0answers
26 views

Not getting TCP Update Window packet after TCP Zero Window begins

Once I get TCP Zero Window during data transmission, I can't send data anymore in that desktop sharing session. Even I stopped the data sending to check if it can resume but no benefit! In my test ...
0
votes
1answer
66 views

VoIP: No audio, local IP in SIP header

I'm trying to get SIP trunking to work on my Bintec Elmeg hybird 130j with sipgate.de as trunking Provider. So far, call signalisation works fine, so I can call outside phones and also get called ...
0
votes
1answer
46 views

Azure NAT blocking connections

When I try to connect to a port on the public IP address of a node, 50% of the time Azure doesn't respond and nmap marks it as "filtered". When I try to connect to the same port from the node using ...
0
votes
2answers
39 views

Iptables NAT (PAT) A to B to C and back

I want to access via SSH a DB server from an outside network via a linux (CentOS) gateway with two interfaces in separate networks as it follow below: Admin PC IP: 10.21.1.8 Linux GW IP eth1 ...
0
votes
0answers
30 views

Translating DNS Server Replys because of multiple NAT Networks

I am planning and building a large infrastructure wich different natted networks. Lets say I have a datacenter network 10.0.0.0/24 and I have many different customer networks that could be anything (...
1
vote
0answers
154 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed 61.179....
2
votes
1answer
92 views

ProFTPD IP masquerade just some ways

I am trying to setup a FTP server using ProFTPD on Xubuntu 15.10. Users will connect to this server in two ways: internally (using an internal IPv4 address) externally (using domain name pointed to ...
0
votes
0answers
26 views

Redirect external ip of server to external ip of virtual machine

I have a server with multiple virtual machines. Let's say this is my server ips: Internal 1.2.3.4 External 5.6.7.8 Now, if i go to 1.2.3.4:8082 it goes to my app (I redirect :8082 to de internal ip ...
2
votes
1answer
73 views

DHCP Server with 2 nics

I have windows 2008 r2 x64 enterprise server with a domain. That server has 2 NIC nic1 which is connected to a router nic2 - here i need 1) run dhcp for private LAN 2) forward internet connection ...
0
votes
0answers
13 views

Reverse proxy, NAT on port 80 and problems to surf web [duplicate]

We have 1 public IP adderss, and some applications that we want to be available outside. I setupped NGINX as a reverse proxy and it worked very well. It's the same IP and port, but the traffic is ...
2
votes
1answer
70 views

AWS Close Ports on Specific Elastic IP Addresses for EC2 Instance

I have a Windows Server in AWS EC2. I have opened ports 80 and 443 to 0.0.0.0/0, and RDP to a private IP address for VPN access. The instance has 4 total elastic IP addresses, each mapping to a ...
0
votes
1answer
32 views

IP NAT from router to SSL-VPN appliance

Has anyone use Cisco 891-K9 to forward 443/SSL to a SSL VPN appliance? (I've never encountered this situation before because either the public facing router terminated VPN directly or we had multiple ...
1
vote
0answers
34 views

VPN with VMware Player [closed]

I have 2 domains, prod and dev. Dev has a 1 way trust from prod (dev trusts prod, but prod does not trust dev). My host computer (laptop, win7 sp1) is a member of the prod domain and can VPN in for ...
1
vote
1answer
39 views

nat and xen, nat only to external ip

I've setup xen that way that all my vm's have a public ip and a private ip (192.168.0.x). However, those vms which don't have a puplic ip should also get internet access so I did setup nat. iptables ...
0
votes
2answers
144 views

How can I use NAT or haproxy to reroute a certain host name?

I have an infrastructure where all requests made by internal subnets have to pass through a server in the "open to the world" subnet, where my NAT instance is (I'm using AWS). I want to create a host ...
0
votes
1answer
75 views

Cannot SSH to ec2 instance in VPC

I'm just starting with AWS, and have 2 ec2 instances running on a VPC, one with a public and private IP, one with only a private IP. I can SSH to both (using my key) if I attach an external IP to ...
0
votes
0answers
15 views

Why would you allow traffic in through a firewall if you aren't NAT'ting it?

Why would you allow traffic from Outside to Inside - i.e. from 9.9.9.9 to WAN_IP of your Firewall Interface, if you then aren't going to do anything with the traffic i.e. NAT it to a given device. ...
0
votes
0answers
32 views

Cisco ASA Static NAT RULE Problem

I need to clarify a one of cisco asa NAT rule. i searched lot and still not found a clear answer. please see below rule • nat (Inside,Outside) source static any any destination static ...