Questions tagged [nat]

In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

650 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1 vote
1 answer
439 views

Inbound connections using Internet Connection Sharing in Apple/Mac/Leopard

I have a Mac mini which I'm using to give some other devices wireless access, by sharing it's Airport connection with the local ethernet, and that is plugged into a switch. All devices can get online ...
Tom Lianza's user avatar
1 vote
1 answer
179 views

Load balancing + NAT issue on BNT GBE 2-7 gear

I've got troubles configuring an Hardware load-Balancer with NAT functions. I have the following architecture: Internet ===> VIP (public) LB (private ip) ====> private addressed servers When a ...
user avatar
1 vote
1 answer
336 views

If I suspend and resume my vmware host vista box, I have to restart the VMware NAT service or my guest Linux DNS requests won't resolve

If I suspend and resume my VMware host (Workstation 6.5) Vista box, I have to manually restart the VMware NAT service or my guest Linux (Ubuntu) DNS requests won't resolve. I can ping boxes on the ...
user avatar
1 vote
1 answer
1k views

Reverse NAT Setup for Hyper-V on Win 2008 R2

I'm trying to setup a Linux server behind a Windows Hyper-V host that will help supply some of the services (SSH, HTTPS, etc). However getting RRAS configured for reverse NAT (port forwarding) turned ...
sukru's user avatar
  • 141
0 votes
1 answer
31 views

Configuring destination NAT nftables entire subnet

Basically what I need is to change all packets destined to one subnet to a different subnet I need this because my router has 2 VPNs and both of them use the same ip range [out of my control] This is ...
94230's user avatar
  • 1
0 votes
0 answers
19 views

Masquerading from a custom routing table does not work

In Ubuntu 22.04 server, masquerading/NATing from a custom routing table does not work (for VPN clients). It does work however when I do not route traffic to a custom table (and let it remain in the ...
Mustafa Mohiuodin's user avatar
0 votes
0 answers
58 views

Attempting to access Nginx from www (public internet network)

I have Nginx running successfully on my local network. Before I proceed with the question, here are the IP addresses: Ubuntu Server Local IP Address: 192.168.29.110 Internet IPv4 IP Address: 45.8....
Daqs's user avatar
  • 101
0 votes
0 answers
34 views

VPN netmap multiple sites with same LAN network address

I have some issues applying netmapping to a case for which I could not find much info about on the web. I am trying to set up a VPN network (server ip: 10.1.0.1) where a user (VPN IP: 10.1.0.2) can ...
Daniel's user avatar
  • 1
0 votes
1 answer
121 views

VM behind nat on Proxmox cannot reach port from internal network

The issue is that I am able to reach port 25 from outside (public internet) to the specific machine in the local network behind NAT, but cannot reach to port 25 on public machine e.g. hotmail-com.olc....
EAK TEAM's user avatar
  • 103
0 votes
1 answer
144 views

NAT between 2 LAN interfaces in Opnsense?

I'm not a network pro so some of my terminology may be off. I've tried to explain what I'm trying to achieve in different ways to hopefully make my request more understandable. I have Opnsense running ...
user23401941's user avatar
0 votes
0 answers
45 views

Benefits of extra DNS config for Google Cloud Private Google Access

Setup: VM running in a subnet with public NAT enabled. VM has only internal IP address. VM needs to connect to Google APIs and services without traversing public internet. Enabling NAT automatically ...
user1069483's user avatar
0 votes
0 answers
21 views

Is iptables NAT forwarding possible bewteen two libvirt VMs?

I'm building a test VPN setup using two libvirt VMs with StrongSwan IKEv2 but can't get traffic to forward. I can see the client sending traffic to the server using tcpdump but the server doesn't do ...
dbazile's user avatar
0 votes
1 answer
23 views

Restricting Ping Access to Public IP Only When VPN Connection is Active on Windows Server

I have configured a Windows Server with a public IP address and set up Routing and Remote Access. After configuring Routing and Remote Access, I selected custom settings and enabled NAT and VPN. I ...
Harsh's user avatar
  • 1
0 votes
0 answers
54 views

OPNsense + HAProxy behind NAT

I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved. So in short words trying to achieve this kind of logic: Dedicated Server (Proxmox ...
EAK TEAM's user avatar
  • 103
0 votes
0 answers
28 views

Site-to-site VPN jump through 2 tunnels

I have 3 networks like on the below diagram: network Subnet A: 10.0.1.0/24, public IP of VPN Gateway: 55.0.0.1 Subnet B: 172.30.0.0/24, public IP of VPN Gateway: 66.0.0.1 Subnet C: 172.20.0.0/24, ...
Frumbar's user avatar
0 votes
0 answers
33 views

Linux iptables/UFW - Exclude ONE host from nat

Currently I am using UFW to NAT two IPv4 Subnets to VPN Interfaces like this: extract of /etc/ufw/before.rules: # NAT table rules *nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 192.168.1.0/24 -o ...
user3528657's user avatar
0 votes
0 answers
77 views

LTE Mikrotik NAT not works

I've and LTE Mikrotik HRBwAPGR-5HacD2HnD and QNAP NAS server. My need was to route trafic to QNAP server (192.168.88.102) from internet(using DDNS and so on) but not able to perform it, maybe I'm ...
Victor  EStalin's user avatar
0 votes
1 answer
93 views

Sending COA request to NAS behind NAT from Freeradius

My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
sajeyks mwangi's user avatar
0 votes
0 answers
140 views

Connection refused for http requests intermittently on multiple certain networks but not others, OPNSense Firewall, maximum confusion

I have been using an OPNSense firewall at my business for about a year now and its worked great. We use it to host some websites, an email server, and wireguard for remote connections. All on a ...
Tjk's user avatar
  • 1
0 votes
0 answers
52 views

Issue with Asterisk SIP Trunk: Payload Must Originate from Specific IP in Multi-Cloud Setup

I'm facing an issue with an Asterisk SIP trunk setup involving multiple cloud environments and a Session Border Controller (SBC). Our service provider, Airtel, requires that the SIP payload originates ...
George Muddu's user avatar
0 votes
1 answer
50 views

How to route traffic from private LAN to specific public remote host via alternate gateway?

Overview I am trying to deal with the following scenario: +------+ (Internet) 50.a.b.c +---------+ | edge + eth0 <-----------------------------> + outpost | +--+---+ 25.u.v.w ...
risclr's user avatar
  • 1
0 votes
1 answer
152 views

How to proxy | forward | nat masquerade all traffic sourced from an IP to another IP elsewhere

I am setting up a new public network IP/24. Sooner or later my old subnet public network IP/24 will be dropped. In the meanwhile I would like to create a proxy to move all traffic to the OLD to the ...
Max Cuttins's user avatar
0 votes
0 answers
27 views

iptables port forwarding rules only work for first response packet

I have the following scenario: +---------------+ +-------------+ +-------------------------+ | PC | | Linux | | Router ...
J_S's user avatar
  • 101
0 votes
0 answers
64 views

Nat Local subnet to another gateway centos7

hi i have a centos 7 with ocserv and iptables installed i wanted to route all OCserv teraffic to ip tunnel (which established and reachable) my Server ip is 172.10.1.1 My OCSERV Users Subnet is : 192....
Keyvan Rahimi's user avatar
0 votes
1 answer
147 views

Forward (NAT) port on FW to the device without having GW set on it?

In short: Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN? Current setup: I'm renting an ESXi server ...
Leonid Pervak's user avatar
0 votes
0 answers
40 views

Why showmount receive local IP(get error timed out)?

I configured NFS over WAN(Internet) on VPS. VPS in Moscow, me near, The ping over Internet is about 5ms And mount work well(both on two clients, with CentOS and Ubunutu) But showmount doesn't work on ...
Andrew's user avatar
  • 1
0 votes
0 answers
55 views

SSL Cerificates blocked by VPN?

I have a server that hosts a website delivered via https on port 443. The website is not directly open to the public internet, but traffic is routed via a VPN from an EC2 instance that has a public ...
vascowhite's user avatar
0 votes
0 answers
966 views

Use nftables to set up IPv6 NAT to IPv4

I am working on setting up a number of EC2 instances with IPv6-only networking. A few of these servers require occasional access to IPv4-only resources controlled by third-parties. Amazon has a blog ...
Moshe Katz's user avatar
  • 3,182
0 votes
1 answer
223 views

wget/curl from internal network (web server) to external ip address (web server) connection failed

for some monitoring purposes on my own software i want to call wget with the "external" UR of the webserver, so my call will look like wget https://www.mydomain.de/path But this call fails ...
Opa114's user avatar
  • 113
0 votes
1 answer
173 views

Route an incoming ICMP packet to a different interface/process

I have an interface enp4s0 with several IPs. I get ICMP packets (type 8, echo request) from external device to my device on enp4s0. I'm trying to route only packets sent to 192.168.1.90 into another ...
hudac's user avatar
  • 136
0 votes
1 answer
135 views

Properly configuring iptables rules behind an openvpn server

hi friends hope everyone is doing well. i got a little misunderstanding of how i should configure iptables v4 rules for an openvpn server. if some wizard can give me a hint it would be great. i'm ...
infoman33's user avatar
0 votes
0 answers
282 views

Assigning a fixed IP to a VM on Alma Linux

I have a Alma Linux 9 host with two IP addresses. I want assign one IP to the host (This is already done) and the second one to a Ubuntu VM. What's the best way to do this? I've set up the VM through ...
Aaron Dewes's user avatar
0 votes
0 answers
339 views

I cannot access website on VM in Hyper -V within LAN

Good day great minds, i cannot access my webserver behind an nginx reverse proxy within my LAN network. i have a mikrotic router with a LAN network 192.168.143.0/24, i deployed an hyper V server that ...
deji's user avatar
  • 1
0 votes
0 answers
78 views

Port forwarding with iptables prerouting not work

I have 3 server server A: 5.161.x.x server B: 193.151.x.x server C: 195.96.x.x I want to forward all traffic from server B and C to server A ,i forwarded Server B to server A with this command: ...
Aref Solaimany's user avatar
0 votes
0 answers
909 views

How to set up StrongSwan (behind NAT) IKEv2/IPSec with PSK (pre-shared key)?

I set up my strongswan server on a virtual Ubuntu 22 behind a NAT. It works well for RCA using login password. But I need to work using only PSK key. I tried a bunch of options, I can not connect from ...
Дмитрий В.'s user avatar
0 votes
1 answer
223 views

pfsense firewall/NAT rules for 2 different LAN where LAN2 has public facing server

I'm looking for a pfsense ruleset that allows a client on LAN1 192.168.3.10 to access a public server on LAN2 10.0.0.2. ports 60000 -60015 TCP/UDP. I otherwise wish to keep these LAN's isolated from ...
RangeyRover's user avatar
0 votes
1 answer
411 views

How to configure Keepalived to act as L4 load balancer via direct routing method

Trying to achieve L4 load balancing via Keepalived in front of HAProxy that will act as L7 load balancer. Both Keepalived and HAProxy are on separate machines. I managed to get everything in the below ...
Mo Ali's user avatar
  • 101
0 votes
1 answer
77 views

BIND "notify" packages over NATted networks possible?

I got a very specific issue: We got two DNS servers with networks being NATted to each other. Example: DNS master has 192.168.1.1 and it's NATted to another subnet 192.168.2.x using the gateway 192....
tabbit's user avatar
  • 1
0 votes
0 answers
86 views

UFW SSH deny rule not working

TLDR: I'm trying to block SSH connections to a server; the server itself is connected to a ubuntu router with UFW on it, but external SSH connections to the server aren't getting denied, UFW doesn't ...
rob_qwerty's user avatar
0 votes
0 answers
80 views

Proxmox: how to route traffic to CTs (VMs)

I have Promox server with 3 IPs (Main IP and 2 additional ones). Server has 3 CTs and I want to assign all 3 IPs to those CTs. Assinging them directly to CTs/VMs didn't work (even gateway is not ...
Aleksandr Muravja's user avatar
0 votes
0 answers
324 views

Setting up Domain Trust over NAT?

Short summary of our situation. I have two separate domains that we need to establish a one-way forest trust between. Domain 1 has native subnet of 172.18.xx and Domain 2 has native subnet of 10.162....
Greg Z's user avatar
  • 1
0 votes
1 answer
30 views

Packets go out one LAN machine but do not reach another one

I have a pretty simple topology. Machine 1: ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:...
Dmitry Filin's user avatar
0 votes
1 answer
777 views

DST-NAT for port tcp/80 on Mikrotik router

I am trying to redirect the incoming traffic to tcp/80 of the public IP interface of Mikrotik router to the internal server with reverse proxy. No matter what I do, the NAT rule does not work with tcp/...
japol's user avatar
  • 1
0 votes
0 answers
123 views

OpenVPN assign client same ip address as static address on router network

I have an OpenVPN server running on a machine behind my home router, and two clients, one Macbook and one iPhone. When I'm not using OpenVPN, I can statically assign IP addresses to the Macbook and ...
jameszp's user avatar
0 votes
0 answers
66 views

NAT forwarding IPTables

Hi I am trying to connect machine A (10.102.44.7) in a local network to machine B (10.102.44.13). Machine B is the one that acts as the gateway to the public network. I want to forward the traffic ...
deadlock's user avatar
  • 111
0 votes
0 answers
186 views

Mikrotik NAT rules does not trigger

I have a LAN subnet 192.168.10.0/24 connected to my CCR-1036. this router acts as DHCP server and Hotspot for users to access internet, a third party accounting server (172.17.1.0/30) is connected to ...
xtg's user avatar
  • 1
0 votes
1 answer
543 views

iptables rules - Forward/Masquerade sevices using nat table

I need to complete an exercise with iptables on a network (docker containers) configured as follows: A router host with 2 network interfaces (eth0 <- public 10.9.0.0/24; eth1 <- lan 192.168.60....
Giuseppe's user avatar
  • 101
0 votes
0 answers
244 views

How to select packets in iptables in nested IPIP tunnel?

I have IPIP tunnel as shown in tcpdump output bellow: IP 192.168.240.112 > 192.168.250.112. Inside this tunnel, there is a traffic in another IPIP tunnel IP 10.233.86.94.35938 > 10.233.100.199....
laimison's user avatar
  • 619
0 votes
0 answers
100 views

Redirect incoming UDP traffic to a local ip adress (iptables?)

tcpdump works as expected on my machine. tcpdump -i enx00e04c04009e -Uw - | tcpdump -en -r - vlan 201 17:52:51.447340 04:01:30:00:00:16 > 03:00:03:00:04:00, ethertype 802.1Q (0x8100), length 66: ...
Aleksandarf's user avatar
0 votes
0 answers
61 views

SSL certificate for subdomain, which is routed to public IP masked on firewall, which navigates to local server

I have a web application hosted on local server. Which we have opened for public use by masking this local IP to public IP provided by ISP. So now website is accessible with public IP. We required to ...
jatz2012's user avatar

1
4 5
6
7 8
13