In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

5
votes
1answer
747 views

Windows Server 2003 IPSec Tunnel Connected, But Not Working (Possibly NAT/RRAS Related)

Configuration I have setup a "raw" IPSec tunnel between a Windows Server 2003 (SBS) machine and a Netgear FVG318 according to the instructions in Microsoft KB816514. The configuration is as follows ...
4
votes
1answer
213 views

Multi homed firewall with ipnat

i am trying (without success) to configure a ipnat/ipf box under FreeBSD 8.2, here is the scenario: outside inside +----+ ADSL ...
2
votes
1answer
71 views

Stateless NAT with CentOS 6

I'm looking to set up the following: ---[IVR 1] | (internet)----[CentOS box]---+---[IVR 2] | ...
2
votes
1answer
255 views

Redirection with natd flags on FreeBSD

I am trying to setup a basic NAT server. I want all traffic coming from the outside world to the NAT server to be redirected to another machine, where I have a lipcap service running to parse this ...
2
votes
1answer
128 views

website not accessible with IIS6 while NAT is configured in Windows 2003

I have Windows2003 server configured with IIS 6. Until now it was working fine, but since I enabled NAT for my users to access the internet via this server, the website becomes unavailable. Note that ...
2
votes
1answer
121 views

OpenVPN tunnel, iptables don't support NAT

I wanted to route my private PCs traffic through my VPS and set up my OpenVPN as fas as necessary but now I have the problem that I can't set iptables, since NAT support is disabled for my server's ...
1
vote
1answer
105 views

My iptable rules do not allow VPN connections

I have installed OpenVPN on my Archlinux server and modified my iptable rules to allow incoming traffic on port 1194 and forward it to the tun0 interface. When I disable/stop the iptables, the OpenVPN ...
1
vote
1answer
73 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
1
vote
1answer
181 views

Access Apache VirtualHost from localhost

I have a DirectAdmin setup with Apache on a server which is behind NAT. Everything is working correctly when accessing a VirtualHost from outside the machine (either through the Internet and the ...
1
vote
1answer
291 views

Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs

I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN. I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
1answer
354 views

iptables can drop traffic but cannot redirect

Suppose that TCP packets are sent to destination ip (dest_ip) and can be dropped by the following command: iptables -A INPUT -d dest_ip -p tcp -j DROP But when I try to redirect the packet using ...
1
vote
1answer
221 views

Passive FTP that would work inside and outside of NAT

I'm using vsftpd 2.2.2 behind the NAT. To make it work, I set pasv_address to my external (internet) IP. Now the problem is with clients that connect it through the LAN - they try to connect to the ...
1
vote
1answer
274 views

Setting up IP masquerading by passing packets through external nodes

I'm trying to find a solution to prevent remote machines determining the source IP of my webserver. This is to hide the webserver's actual IP, helping avoid DDoS attacks. Incoming requests are ...
1
vote
1answer
306 views

Connect KVM virtual network to internet

I have a CentOS server running KVM and need to connect a virtual network to the internet. The network must be routed or NATted, it must not be bridged (port security). If possible, I would like to ...
1
vote
1answer
113 views

Open VPN redirect all trafic from TAP/tun interface to netowrk interface

I want all my traffic redirected to the OpenVPN tunnel. I used the directive push "redirect-gateway def1" but the Tap interface on the server is not routed to the internet. How can I do it on ...
1
vote
1answer
397 views

Virtual box linux routing

Sorry for the basic question but I cant figure this one out. I want to set up a small network of linux servers for testing purposes. So I have a host server running virtual box with the following ...
1
vote
1answer
183 views

Linux ( Fedora 15 ) multiple ISP and NAT routing

So I have my system running Fedora 15 and currently with a DSL line. The line provides a static IP along with static route, DNS. I run a web/E-Mail/DNS server from this IP. It also supports a NAT'd ...
1
vote
1answer
468 views

pfsense firewall filter rules behind nat?

i am new in pfsense i have vmware which pfsense and windows xp are installed on them pfsense in using ip 192.168.44.1 for LAN and 192.168.121.129 for wan (which is NAT) my win xp ip is 192.168.44.2 ...
1
vote
1answer
231 views

port forwarding to access services on servers behind NAT

I have some security camera systems in different locations, each location does have internet, the ISP is NATing all the IPs so theres no way to open ports to my systems. My solution was to rent a VPS ...
1
vote
1answer
710 views

Cisco ip nat overload algorithm

I have a cisco 7206 vxr with 15.0 ios(c7200p-adventerprisek9-mz.151-3.S0a.bin) .I configured the overloaded nat there. some of confs: ip nat pool nat a.b.c.2 a.b.c.254 netmask 255.255.255.0 ip nat ...
1
vote
1answer
243 views

NAT and ISP Subnet when load balancing on pfsense?

I have a pfsense box that I'm trying to plan the configuration for. I am going to be load balancing two ISP's, each with their own /29 static IP subnet. The question I have is in relation to the way ...
1
vote
1answer
81 views

NAT ports - how do they work?

I have the following network schema: Computer A: three nics: NIC 1 (eth0): dhcp, public internet NIC 2 (eth1): static 192.168.1.1, gateway for Computer B NIC 3 (eth2): static 192.168.2.1, gateway ...
1
vote
1answer
470 views

Does hole punching require a UDP rendezvous server Or could it be a TCP one?

I'm trying to get my head wrap around this issue... I would like to connect two users... Those users are already connected to a TCP server, which is aware of both public ip and connection TCP port. ...
1
vote
1answer
100 views

ASA permit only one host to *.xyz.com

I want to allow a host to download some updates from *.xyz.com (in internet). How should I permit only this host from my inside network to access *.xyz.com on ASA, access can be via http? At moment ...
1
vote
1answer
510 views

iptables and virtual machines of KVM, no ping, no ssh from VMs

Hi everyone :) I have two virtual machines KVM. I did two alias to eth0 - eth0:0 and eth0:1 and put them on an external IPs (eth0:0 - 89.114.122.3, eth0:1 - 89.114.122.4)​​. Now the problem is: ...
1
vote
1answer
796 views

how to setup sonicwall tz210 to port forward packets received from external ip to another external ip

i have a sonicwall tz210 on a fixed ip, say ip1. And then i have, let's say a legacy server, with external ip ip2, which sends data to ip1 (and I have another server on ip1 behind the sonicwall which ...
1
vote
1answer
101 views

iptables and DNAT. quick question

So I have a machine with a single interface. It has 2 ip addresses (eth0: 192.168.2.3, eth0:1 192.168.2.4). I'd like to take any traffic coming in on 192.168.2.4 and NAT it to an external ip ...
1
vote
1answer
339 views

iproute and nat across devices

I've got the following configuration: vlan123@eth0 - range 1.2.3.0/24, with 1.2.3.4 assigned to it br2000 - range 10.2.3.0/24 In the ip route I see: 10.2.3.0/24 dev br2000 proto kernel scope link ...
0
votes
0answers
55 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
0
votes
0answers
18 views

client does not respond server's syn_ack package

pc to access the server through a NAT device。 client has successfully established a tcp socket with server using this port , and the server's interacted with the message well, socket has been closed ...
0
votes
0answers
157 views

Load-balancing PPTP connections

I'm trying to load balance two PPTP connections, connected to the same server. I use the following script, but there is no send and receive via PPTP connections. What part am I doing wrong? Are there ...
0
votes
0answers
230 views

Repair RRAS and NAT on Windows Server 2008 R2

We have a Windows Server 2008 R2 server with RRAS installed and configure with VPN and NAT. NAT stopped working and when I checked, IPv4 is missing . I've tried re-installing RRAS but it just ...
0
votes
0answers
124 views

How to set mark on packet when forwarding it in nat prerouting table with rp filter 0?

I have a serious problem with my server ubuntu 13. I have two ADSL lines and an internal network as follows. i.imgur.com/v4ddHXf.png (URL IMG) IP redirections made ​​two because there are two older ...
0
votes
0answers
74 views

Multiple routes and gateways with NAT

My setup is a VM host with two network interfaces where I want to use one as private/internal and the other one as public (which will get a public address on the host), where all the NAT magic to the ...
0
votes
0answers
57 views

VmWare : listening nat in promiscuous mode

This document describe how NAT in VmWare works. Next picture is from that document. Is there way to configure Virtual Ethernet switch in that way: All packets arrived from nat send to specified ...
0
votes
0answers
492 views

Windows Server 2012 R2, multiple Hyper-V Virtual Network Switches for multiple VMs

I want to configure something like this: I have one NIC, and have been given 3 IPs by datacenter, on my server which is running WS2012R2, with 10 VMs on hyper-v. Windows Server 2012 R2 (host) one ...
0
votes
0answers
133 views

Why is an ack response being sent to the wrong gateway?

I was trying to determine why a packet forwarded by iptables to my internal lan is returned on the wrong gateway. Having investigated this further, I determined that, at least in the case of one of ...
0
votes
0answers
59 views

Where can I find the range of IP addresses of my container OpenVZ

I'm looking for the "range of IP addresses of my container"... Where can I find those ? /etc/network/interfaces ? ifconfig ? I don't know and I can't find any answers... I need it for this tutorial ...
0
votes
0answers
144 views

Amazon EC2 Nat Instance - goes out but not back in

I've followed Amazon's steps and list what I've done. I've created 6 subnets (4 private SN1: 10.50.1.0/24, SN2: 10.50.2.0/24, SN3: 10.50.3.0/24, SN4: 10.50.4.0/24) and 2 public (SN5: 10.50.101.0/24 ...
0
votes
0answers
260 views

Socksify TCP connections reaching a gateway IP — preferably without iptables

I have Virtualbox installed on Debian with a few virtual machines. I can't install anything in the guests, and I use host only networking, vboxnet0. The host IP in the host network is 192.168.56.1, ...
0
votes
0answers
186 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
0answers
295 views

Are my NAT rules in ASA 8.6 correct

I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal? Assumptions: outside's IP address is 66.66.66.5/29 The outside IP address I want things translated ...
0
votes
0answers
94 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
0answers
727 views

Cisco 1921 - Using NAT (NVI method) between VRF's slow performance

I'm setting up a Cisco 1921 with two VRF's: one to the internet and one to the LAN. The LAN is in private address space so source address translation needs to happen when the packets leave the ...
0
votes
0answers
115 views

Why NATted packets have different source ip addresses?

I've got ubuntu box with nat. Here is the problem: root@office.redhelper.ru:~# tcpdump -i tap0 host 194.190.8.141 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode ...
0
votes
0answers
157 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
0
votes
0answers
149 views

Multihoming, NAT and ICMP

My router is the default gateway of a LAN and is multihomed. ISP2 is used for HTTP, HTTPS and ISP1, the default gateway of the default routing table, for the rest of the traffic. Similar questions ...
0
votes
0answers
633 views

Cisco 881 losing NAT NVI translation config after reload

This is a weird one, so I'll try to explain in as much detail as I can so I'm giving the whole picture. As I've mentioned in my other questions, I'm in the process of setting up a new Cisco 881 as my ...
-1
votes
0answers
32 views

My Network place can't open each workgroup using WINS Server and NAT

I have two Network with NAT or router is another stand alone server and with WINS server (windows Server 2003), bellow my network scope network 1 : 192.168.0.0/24 network 2 : 192.168.88.0/24 All ...
-2
votes
0answers
18 views

Can NAT be used for a br-ex OpenVSwitch interface (VirtualBox)?

Can "NAT" be used for an interface (eth1) which has a br-ex attached to it using OpenVSwitch or does it have to be "Bridged Adapter"? (VirtualBox) /etc/network/interfaces on Ubuntu 14.04 auto eth1 ...