0
votes
3answers
101 views

Do I need public DNS records for the external IPs of our workstation NAT?

We have certain stakeholders who believe that the public IPs used by our workstations should have globally available DNS records, and that not having dns records would break some internet services. ...
-1
votes
1answer
57 views

can anyone show me how can i fix error with my NAT config

Can anyone help me with my packet tracer problem? My network 2 buildings (each building has 3 vlans) on the same side and it has 2 sides, between is internet. I finish with DHCP and now I try to ...
1
vote
1answer
83 views

How to Configure Source NAT (Private IP => Public IP Outbound)

I'm running VMWare ESXi Free and have Zentyal SBS 3.2 running as a Gateway. I have 5 Public IPS (CIDR/29, let's call them 69.1.1.1 - 69.1.1.5) and currently Zentyal is bound to 69.1.1.1 as the ...
1
vote
2answers
37 views

Assign internal IP address based on subdomain

I have a domain name, let's say foo.com. I have a server which has a public IP (Server-A). I also have a lot of servers (Server-B, Server-C, Server-D etc) which are all connected in a private network ...
0
votes
0answers
47 views

Linux routing: How to allow a device inside private network to connect a public IP over an unknown network?

Consider following network topology: ---------- ---- (my network) ---- | Device 1 | (.101) | 192.168.191.0/24 | ---------- | | ...
0
votes
0answers
38 views

KVM : domain names are resolved, but cannot ping

I've found that in KVM, my networking is acting funny. Oddly (1) I can resolve external internet locations using nslookup or ping , but I cannot actually receive a ping back. (2) I cannot ping ...
2
votes
1answer
66 views

Routing DHCP traffic over the internet

i'd like to know if it's possible for the internet to be between a DHCP server and the network it's "assigned" to? so basically, something like this: -------------- ------------- ...
2
votes
1answer
78 views

Can I use NAT64 to route public IPV6 traffic to internal IPV4?

I have a bunch of public IPv6 addresses and some services that run IPv4 only. Can I use NAT64 to connect these services? Is there another solution like a proxy or something?
0
votes
1answer
85 views

can I use DNS with private NAT addresses?

I want to build a service that dynamically creates VMs and assigns each VM a public DNS record which could be a full domain or a subdomain. Assume the VMS all live on a single host. The VMs will have ...
1
vote
0answers
46 views

Poor large transfers behind NAT on Centos

I have the following set up. A Centos 6.5 VM running on an ESX host, with a public IP4 address. It is acting as a gateway for (a bunch of) other Centos 6.5 VMs that are only connected to a virtual ...
1
vote
1answer
42 views

Websever behind Sonicwall, Gateway Timeout

I am stuck here, I have a Cradlepoint CBA750B in IP-passthrough mode connected to x1 on my Sonicwall NSA220. Behind the Sonicwall I have a webserver on the LAN. I have X1 set to use DHCP to get the ...
1
vote
0answers
54 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
0
votes
1answer
41 views

Software for emulating networks and NAT

I am working on a software that I need to test with different types of NAT, and I would like to set up a test environment I can reconfigure in different NAT modes. I would like to have: ...
1
vote
0answers
45 views

OpenVPN running on Internet Gateway, so all private clients can access VPN with no config

Our LAN connects to our office gateway machine (192.168.1.1), which is connected to the Internet. I have setup NAT/Masquerading for this purpose with no issue. We also use OpenVPN to connect to our ...
1
vote
1answer
70 views

how to forward proxy requests using iptables

I've this schenario ----------------- ---------------- ---------- | SERVER A | ---(port:2128)> | PROXY | ---> | INTERNET | | (10.30.1.1) | ...
1
vote
0answers
100 views

Simulating a client behind a NAT in Virtual Box

I am trying to simulate a client behind a NAT using Virtual Box. I have a host machine let's say with an IP address 130.0.0.1. I create a virtual machine (let's call it VM1) running Ubuntu 12.04 with ...
0
votes
0answers
78 views

How to set mark on packet when forwarding it in nat prerouting table with rp filter 0?

I have a serious problem with my server ubuntu 13. I have two ADSL lines and an internal network as follows. i.imgur.com/v4ddHXf.png (URL IMG) IP redirections made ​​two because there are two older ...
0
votes
3answers
176 views

CentOS masqueraded network with iptables clients not connecting: Unable to ping

I'm a novice sysadmin working on a system with a CentOS server masquerading traffic with client machines also running CentOS. Something with the tables got messed up and my clients no longer have ...
0
votes
0answers
61 views

MPTCP router - How can i share access to LAN network?

MPTCP is a emerging protocol that is able to split one TCP session over multiple links. In order to do that the source and destination have to be MPTCP capable. I have configured MPTCP on a linux ...
0
votes
0answers
41 views

VmWare : listening nat in promiscuous mode

This document describe how NAT in VmWare works. Next picture is from that document. Is there way to configure Virtual Ethernet switch in that way: All packets arrived from nat send to specified ...
1
vote
1answer
51 views

Lost as to what I'm not doing in setting up a home lan network [closed]

I'm a PC repair tech and this is a problem I've recently been trying to troubleshoot for a customer. Upstairs they have the main router which servers as the gateway and router, both hardwired and ...
1
vote
2answers
593 views

NAT Gateway - Maximum connection limit

I know just enough networking to be dangerous. The nitty gritty low level details of NAT are not something I am particularly knowledgeable about. I accidentally found myself in a discussion earlier ...
2
votes
4answers
534 views

Linux - two subnets, one interface, one gateway - NAT the additional subnet

We currently have a few servers that all use the same LAN: Host1: eth0 10.0.0.1/24 Host2: eth0 10.0.0.2/24 Host3: eth0 10.0.0.3/24 Gateway: 10.0.0.254 We want to run some VMs (VirtualBox) on these ...
0
votes
0answers
32 views

making a software router for my private network [duplicate]

give me suggestion on this problem. I have 2 nic cards public ip (eth1) and private ip (eth2). now i have a linux system having centos 6.4. I made this system software router so can access internet on ...
1
vote
1answer
96 views

Advanced NAT - Mix PAT with NAT

I've just configured an Ubuntu Server as a router with NAT/PAT, and I'm trying to do the following thing: I work for a school that has divided its network into smaller networks connected by routers. ...
0
votes
1answer
134 views

Enable route between subnet

I have a Centos server with three NIC cards. ETH0 Public IP xx.xx.xx.xx1/xx.xx.xx.xx2 (with two public IP) EHT1 Local Subnet 192.168.80.0 (DHCP server listening on this interface) ETH2 Local ...
0
votes
1answer
318 views

How do I configure routing from host system to virtual machine?

I have an Ubuntu host system that is running a MAC-VLAN virtual interface on top of eth0 interface, ipv4 routing is enabled. Also, this system has a Docker (LXC) container running: docker0 Link ...
0
votes
0answers
204 views

Are my NAT rules in ASA 8.6 correct

I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal? Assumptions: outside's IP address is 66.66.66.5/29 The outside IP address I want things translated ...
3
votes
1answer
400 views

Symmetric NAT and UDP Hole Punching

I've read this question, but the explanation of Symmetric NAT wasn't detailed enough. Please could someone help me to understand the following paragraphs? I read this about Symmetric NAT: Each ...
2
votes
0answers
100 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
0
votes
1answer
88 views

Get IP of the “requestor” when doing iptables NAT

I am doing NAT traffic forwarding using iptables (1.1.1.1 => 2.2.2.2) with the following commands: iptables -t nat -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination 2.2.2.2 iptables -t nat -A ...
3
votes
2answers
2k views

How do I forward/NAT all traffic to one interface/IP to a remote IP?

I have one "server A" that has multiple IPs attached to it, like so: eth0:0 1.1.1.1 eth0:1 1.1.1.2 eth0:2 1.1.1.3 I have another "server B" that also has multiple IPs attached to it, like so: ...
1
vote
2answers
87 views

Access virtual box on remote server

I have a remote server (ubuntu) with 1 public IP. I've installed headless VirtualBox and deployed machine. For now I can access it by VirtualBox's VRDE Server running on server, but what i need is ...
0
votes
1answer
116 views

RRAS NAT Monitoring

I was wondering if I could monitor my RRAS (VPN) users TCP connection.I don't want to sniff data, however I need to log TCP port numbers and timestamps as well as corresponding users and local ...
9
votes
3answers
3k views

Exposing multiple servers behind NAT using a single public IP address

This is a Canonical Question about NAT and DNS I'm currently trying to set up a network with a DMZ containing a web server and an e-mail server separated from the Internet by a network address ...
2
votes
1answer
769 views

How to set mark on packet when forwarding it in nat prerouting table?

I have a few port forward rules like this iptables -t nat -A PREROUTING -p tcp --dport 46000 -j DNAT --to-destination 172.16.8.2:46000 iptables -A FORWARD -p tcp -d 172.16.8.2 --dport 46000 -j ACCEPT ...
0
votes
0answers
110 views

Why NATted packets have different source ip addresses?

I've got ubuntu box with nat. Here is the problem: root@office.redhelper.ru:~# tcpdump -i tap0 host 194.190.8.141 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode ...
1
vote
0answers
157 views

OpenStack Server Instances have internet access, but they are unable to access the internal network

I'm running an OpenStack Grizzly release with a Nova-Network configuration. [No Quantium]. My network is setup as follows: OpenStack Box (10.10.13.xx network)->OpenStack Internal Network ...
1
vote
1answer
310 views

Can you configure SNAT with multiple source IP's and use static DNAT (port forwarding)?

We have a private LAN connected to a firewall with multiple public IP's to use for SNAT in order not to overload the ports on a single IP. However, we have a requirement to allow certain workstations ...
17
votes
7answers
2k views

Why don't more organizations use inside-to-inside NAT or similar solutions to allow NAT hairpins?

Inside-to-inside NAT aka NAT loopback solves hairpin NAT issues when accessing a web server on the external interface of an ASA or similar device from computers on the internal interface. This ...
1
vote
0answers
361 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
1
vote
0answers
46 views

Nat Traversal, peers unable to communicate

I'm currently working on a project that requires NAT traversal but I seem to be running into difficulty. I have the following setup running for testing: R1, Verizon Fios router connected to the ...
-2
votes
1answer
84 views

Allow LAN to access External Internet, Iptables

I have an internal network behind my router on eth0, and I have my router connected to the internet thorugh wlan0. I can't access the internet from inside the lan, how can I fix this? wlan0: ...
0
votes
1answer
88 views

NAT/PAT port and address selection

I am currently having some issues with TCP port reused too often (under 2 minutes) for a source NAT and I was wandering what is the algorithm used to select the IP and port for a SNAT. Here is some ...
2
votes
4answers
3k views

Differences between bridged and NAT networking

I don't fully understand the differences between NAT and a bridged connection over an virtual machine. As far as I've found, machines which are on the same network with our host machine can access our ...
2
votes
1answer
318 views

Can't connect to instance via floating IPs, not natting/forwarding properly

I'm having trouble getting floating IPs to work properly on my OpenStack setup. It looks like the controller node (running nova-network) isn't forwarding the traffic to the instances. I've got a ...
0
votes
1answer
375 views

Port forward (NAT) based on domain/URL

I currently have my Time Capsule to forward all inbound requests on port 80 to my Mac Mini which runs a web server with its local ip address of 192.168.1.8. I also have DNS set up so that if I go to ...
2
votes
3answers
762 views

Is it possible to capture packets of a Router?

I am facing an issue that some packets sent out to internet from inside network were missing. The pattern we are using is like: Client A ←→ Switch A ← Router A:NAT ← .. Network .. → Router ...
-1
votes
1answer
61 views

Accessing web site/server from inside a NAT network [closed]

I've got a web server/file server running on a small network that is connected to the outside world via an ADSL line. Everything works great, but the problem we have is that we can't access the web ...
2
votes
0answers
1k views

NAT64 configuration with tayga on Debian 6

I'm trying to implement NAT64 with tayga on my server and came to a point where I'm not sure how to proceed. My server is connected via one IPv4 address and one /64 IPv6 address block to the ...