Questions tagged [nat]
In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.
650
questions with no upvoted or accepted answers
1
vote
1
answer
439
views
Inbound connections using Internet Connection Sharing in Apple/Mac/Leopard
I have a Mac mini which I'm using to give some other devices wireless access, by sharing it's Airport connection with the local ethernet, and that is plugged into a switch. All devices can get online ...
1
vote
1
answer
179
views
Load balancing + NAT issue on BNT GBE 2-7 gear
I've got troubles configuring an Hardware load-Balancer with NAT functions.
I have the following architecture:
Internet ===> VIP (public) LB (private ip) ====> private addressed servers
When a ...
1
vote
1
answer
336
views
If I suspend and resume my vmware host vista box, I have to restart the VMware NAT service or my guest Linux DNS requests won't resolve
If I suspend and resume my VMware host (Workstation 6.5) Vista box, I have to manually restart the VMware NAT service or my guest Linux (Ubuntu) DNS requests won't resolve.
I can ping boxes on the ...
1
vote
1
answer
1k
views
Reverse NAT Setup for Hyper-V on Win 2008 R2
I'm trying to setup a Linux server behind a Windows Hyper-V host that will help supply some of the services (SSH, HTTPS, etc). However getting RRAS configured for reverse NAT (port forwarding) turned ...
0
votes
1
answer
31
views
Configuring destination NAT nftables entire subnet
Basically what I need is to change all packets destined to one subnet to a different subnet
I need this because my router has 2 VPNs and both of them use the same ip range [out of my control]
This is ...
0
votes
0
answers
19
views
Masquerading from a custom routing table does not work
In Ubuntu 22.04 server, masquerading/NATing from a custom routing table does not work (for VPN clients).
It does work however when I do not route traffic to a custom table (and let it remain in the ...
0
votes
0
answers
58
views
Attempting to access Nginx from www (public internet network)
I have Nginx running successfully on my local network. Before I proceed with the question, here are the IP addresses:
Ubuntu Server Local IP Address: 192.168.29.110
Internet IPv4 IP Address: 45.8....
0
votes
0
answers
34
views
VPN netmap multiple sites with same LAN network address
I have some issues applying netmapping to a case for which I could not find much info about on the web.
I am trying to set up a VPN network (server ip: 10.1.0.1) where a user (VPN IP: 10.1.0.2) can ...
0
votes
1
answer
121
views
VM behind nat on Proxmox cannot reach port from internal network
The issue is that I am able to reach port 25 from outside (public internet) to the specific machine in the local network behind NAT, but cannot reach to port 25 on public machine e.g. hotmail-com.olc....
0
votes
1
answer
144
views
NAT between 2 LAN interfaces in Opnsense?
I'm not a network pro so some of my terminology may be off. I've tried to explain what I'm trying to achieve in different ways to hopefully make my request more understandable.
I have Opnsense running ...
0
votes
0
answers
45
views
Benefits of extra DNS config for Google Cloud Private Google Access
Setup:
VM running in a subnet with public NAT enabled.
VM has only internal IP address.
VM needs to connect to Google APIs and services without traversing public internet.
Enabling NAT automatically ...
0
votes
0
answers
21
views
Is iptables NAT forwarding possible bewteen two libvirt VMs?
I'm building a test VPN setup using two libvirt VMs with StrongSwan
IKEv2 but can't get traffic to forward. I can see the client sending
traffic to the server using tcpdump but the server doesn't do
...
0
votes
1
answer
23
views
Restricting Ping Access to Public IP Only When VPN Connection is Active on Windows Server
I have configured a Windows Server with a public IP address and set up Routing and Remote Access. After configuring Routing and Remote Access, I selected custom settings and enabled NAT and VPN. I ...
0
votes
0
answers
54
views
OPNsense + HAProxy behind NAT
I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved.
So in short words trying to achieve this kind of logic:
Dedicated Server (Proxmox ...
0
votes
0
answers
28
views
Site-to-site VPN jump through 2 tunnels
I have 3 networks like on the below diagram:
network
Subnet A: 10.0.1.0/24, public IP of VPN Gateway: 55.0.0.1
Subnet B: 172.30.0.0/24, public IP of VPN Gateway: 66.0.0.1
Subnet C: 172.20.0.0/24, ...
0
votes
0
answers
33
views
Linux iptables/UFW - Exclude ONE host from nat
Currently I am using UFW to NAT two IPv4 Subnets to VPN Interfaces like this:
extract of /etc/ufw/before.rules:
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.1.0/24 -o ...
0
votes
0
answers
77
views
LTE Mikrotik NAT not works
I've and LTE Mikrotik HRBwAPGR-5HacD2HnD and QNAP NAS server.
My need was to route trafic to QNAP server (192.168.88.102) from internet(using DDNS and so on) but not able to perform it, maybe I'm ...
0
votes
1
answer
93
views
Sending COA request to NAS behind NAT from Freeradius
My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
0
votes
0
answers
140
views
Connection refused for http requests intermittently on multiple certain networks but not others, OPNSense Firewall, maximum confusion
I have been using an OPNSense firewall at my business for about a year now and its worked great. We use it to host some websites, an email server, and wireguard for remote connections. All on a ...
0
votes
0
answers
52
views
Issue with Asterisk SIP Trunk: Payload Must Originate from Specific IP in Multi-Cloud Setup
I'm facing an issue with an Asterisk SIP trunk setup involving multiple cloud environments and a Session Border Controller (SBC). Our service provider, Airtel, requires that the SIP payload originates ...
0
votes
1
answer
50
views
How to route traffic from private LAN to specific public remote host via alternate gateway?
Overview
I am trying to deal with the following scenario:
+------+ (Internet) 50.a.b.c +---------+
| edge + eth0 <-----------------------------> + outpost |
+--+---+ 25.u.v.w ...
0
votes
1
answer
152
views
How to proxy | forward | nat masquerade all traffic sourced from an IP to another IP elsewhere
I am setting up a new public network IP/24.
Sooner or later my old subnet public network IP/24 will be dropped.
In the meanwhile I would like to create a proxy to move all traffic to the OLD to the ...
0
votes
0
answers
27
views
iptables port forwarding rules only work for first response packet
I have the following scenario:
+---------------+ +-------------+ +-------------------------+
| PC | | Linux | | Router ...
0
votes
0
answers
64
views
Nat Local subnet to another gateway centos7
hi i have a centos 7 with ocserv and iptables installed
i wanted to route all OCserv teraffic to ip tunnel (which established and reachable)
my Server ip is 172.10.1.1
My OCSERV Users Subnet is : 192....
0
votes
1
answer
147
views
Forward (NAT) port on FW to the device without having GW set on it?
In short:
Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN?
Current setup:
I'm renting an ESXi server ...
0
votes
0
answers
40
views
Why showmount receive local IP(get error timed out)?
I configured NFS over WAN(Internet) on VPS. VPS in Moscow, me near, The ping over Internet is about 5ms
And mount work well(both on two clients, with CentOS and Ubunutu)
But showmount doesn't work on ...
0
votes
0
answers
55
views
SSL Cerificates blocked by VPN?
I have a server that hosts a website delivered via https on port 443. The website is not directly open to the public internet, but traffic is routed via a VPN from an EC2 instance that has a public ...
0
votes
0
answers
966
views
Use nftables to set up IPv6 NAT to IPv4
I am working on setting up a number of EC2 instances with IPv6-only networking.
A few of these servers require occasional access to IPv4-only resources controlled by third-parties.
Amazon has a blog ...
0
votes
1
answer
223
views
wget/curl from internal network (web server) to external ip address (web server) connection failed
for some monitoring purposes on my own software i want to call wget with the "external" UR of the webserver, so my call will look like wget https://www.mydomain.de/path
But this call fails ...
0
votes
1
answer
173
views
Route an incoming ICMP packet to a different interface/process
I have an interface enp4s0 with several IPs.
I get ICMP packets (type 8, echo request) from external device to my device on enp4s0.
I'm trying to route only packets sent to 192.168.1.90 into another ...
0
votes
1
answer
135
views
Properly configuring iptables rules behind an openvpn server
hi friends hope everyone is doing well.
i got a little misunderstanding of how i should configure iptables v4 rules for an openvpn server.
if some wizard can give me a hint it would be great.
i'm ...
0
votes
0
answers
282
views
Assigning a fixed IP to a VM on Alma Linux
I have a Alma Linux 9 host with two IP addresses.
I want assign one IP to the host (This is already done) and the second one to a Ubuntu VM.
What's the best way to do this? I've set up the VM through ...
0
votes
0
answers
339
views
I cannot access website on VM in Hyper -V within LAN
Good day great minds,
i cannot access my webserver behind an nginx reverse proxy within my LAN network.
i have a mikrotic router with a LAN network 192.168.143.0/24, i deployed an hyper V server that ...
0
votes
0
answers
78
views
Port forwarding with iptables prerouting not work
I have 3 server
server A: 5.161.x.x
server B: 193.151.x.x
server C: 195.96.x.x
I want to forward all traffic from server B and C to server A
,i forwarded Server B to server A with this command:
...
0
votes
0
answers
909
views
How to set up StrongSwan (behind NAT) IKEv2/IPSec with PSK (pre-shared key)?
I set up my strongswan server on a virtual Ubuntu 22 behind a NAT. It works well for RCA using login password.
But I need to work using only PSK key. I tried a bunch of options, I can not connect from ...
0
votes
1
answer
223
views
pfsense firewall/NAT rules for 2 different LAN where LAN2 has public facing server
I'm looking for a pfsense ruleset that allows a client on LAN1 192.168.3.10 to access a public server on LAN2 10.0.0.2. ports 60000 -60015 TCP/UDP. I otherwise wish to keep these LAN's isolated from ...
0
votes
1
answer
411
views
How to configure Keepalived to act as L4 load balancer via direct routing method
Trying to achieve L4 load balancing via Keepalived in front of HAProxy that will act as L7 load balancer. Both Keepalived and HAProxy are on separate machines. I managed to get everything in the below ...
0
votes
1
answer
77
views
BIND "notify" packages over NATted networks possible?
I got a very specific issue: We got two DNS servers with networks being NATted to each other. Example: DNS master has 192.168.1.1 and it's NATted to another subnet 192.168.2.x using the gateway 192....
0
votes
0
answers
86
views
UFW SSH deny rule not working
TLDR: I'm trying to block SSH connections to a server; the server itself is connected to a ubuntu router with UFW on it, but external SSH connections to the server aren't getting denied, UFW doesn't ...
0
votes
0
answers
80
views
Proxmox: how to route traffic to CTs (VMs)
I have Promox server with 3 IPs (Main IP and 2 additional ones). Server has 3 CTs and I want to assign all 3 IPs to those CTs.
Assinging them directly to CTs/VMs didn't work (even gateway is not ...
0
votes
0
answers
324
views
Setting up Domain Trust over NAT?
Short summary of our situation.
I have two separate domains that we need to establish a one-way forest trust between. Domain 1 has native subnet of 172.18.xx and Domain 2 has native subnet of 10.162....
0
votes
1
answer
30
views
Packets go out one LAN machine but do not reach another one
I have a pretty simple topology.
Machine 1:
ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:...
0
votes
1
answer
777
views
DST-NAT for port tcp/80 on Mikrotik router
I am trying to redirect the incoming traffic to tcp/80 of the public IP interface of Mikrotik router to the internal server with reverse proxy.
No matter what I do, the NAT rule does not work with tcp/...
0
votes
0
answers
123
views
OpenVPN assign client same ip address as static address on router network
I have an OpenVPN server running on a machine behind my home router, and two clients, one Macbook and one iPhone.
When I'm not using OpenVPN, I can statically assign IP addresses to the Macbook and ...
0
votes
0
answers
66
views
NAT forwarding IPTables
Hi I am trying to connect machine A (10.102.44.7) in a local network to machine B (10.102.44.13). Machine B is the one that acts as the gateway to the public network.
I want to forward the traffic ...
0
votes
0
answers
186
views
Mikrotik NAT rules does not trigger
I have a LAN subnet 192.168.10.0/24 connected to my CCR-1036. this router acts as DHCP server and Hotspot for users to access internet, a third party accounting server (172.17.1.0/30) is connected to ...
0
votes
1
answer
543
views
iptables rules - Forward/Masquerade sevices using nat table
I need to complete an exercise with iptables on a network (docker containers) configured as follows:
A router host with 2 network interfaces (eth0 <- public 10.9.0.0/24; eth1 <- lan 192.168.60....
0
votes
0
answers
244
views
How to select packets in iptables in nested IPIP tunnel?
I have IPIP tunnel as shown in tcpdump output bellow: IP 192.168.240.112 > 192.168.250.112.
Inside this tunnel, there is a traffic in another IPIP tunnel IP 10.233.86.94.35938 > 10.233.100.199....
0
votes
0
answers
100
views
Redirect incoming UDP traffic to a local ip adress (iptables?)
tcpdump works as expected on my machine.
tcpdump -i enx00e04c04009e -Uw - | tcpdump -en -r - vlan 201
17:52:51.447340 04:01:30:00:00:16 > 03:00:03:00:04:00, ethertype 802.1Q (0x8100), length 66: ...
0
votes
0
answers
61
views
SSL certificate for subdomain, which is routed to public IP masked on firewall, which navigates to local server
I have a web application hosted on local server. Which we have opened for public use by masking this local IP to public IP provided by ISP. So now website is accessible with public IP.
We required to ...