Tag Info

Hot answers tagged

2

Short answer to your revised question is that there are two ways to do it; both require you remove the second NAT step (which destroys the info you're looking for). Your options after doing that are: 1) Make Server A the next hop for Server B for the traffic in question, which is why it works for your router as mentioned. This could be accomplished, in ...


2

can I go for virtual server environment using entry level desktop board having i3 or i5, 8GB RAM and 500 MB HDD without compromising any performance compared to existing machine? With the exception of th hard discs (if you can go with an SSD that will make a hugh difference) the answer is clearly yes. The P4 is ancient - seriously ancient. Likely my ...


2

I presume your distribution is on 32 bit and your interface counter doesn't support more than 4Gigs (2^32) and after reaching this MAX value is reseting and start from 0. This is way you don't see all the traffic. If is on 64bit then the traffic counter should be ok, if you restarted the interface in the same time with the other guys who count your traffic ...


2

You're asking for an entirely protocol-independent proxy that has something like HTTP host headers, which (AFAIK) doesn't exist. The only other thing that looks like this is a NAT/PAT solution which will require as many public IP addresses as simply using public IP addresses in the first place.


2

A silent proxy may be indistinguishable from NAT. But some may add headers, that allow to identify that request comes through proxy.


2

First answer was related to FreeBSD. The issues are the same but the parameters are different on Ubuntu: Stock Ubuntu goes a long way. When you start to tune these parameters you might introduce more problems than you fix. From the lack of information you give my advice would be not to touch these parameters until you understand the networking parts a ...


2

After "Brute Forcing" the configuration (for the second time) I've managed to get this to work. The first time I tried to configure this every conceivable way I could think of, I didn't have the Virtual Interfaces assigned to the WAN interface. Apparently in Zentyal (an possibly the networking world entirely), the router/gateway/whatever it's called ...


1

By default, non-transparent proxy inserts "Via:" field to HTTP request header. Of course, this is configurable option that can be disabled, for example: http://www.squid-cache.org/Doc/config/via/ Transparent proxy tries to be invisible, so cannot be detected: "A 'transparent proxy' is a proxy that does not modify the request or response beyond what ...


1

You do not say which system you are running iptables on. If you are using FreeBSD it stores network packages in mbuf clusters. You can tune the number of mbuf clusters with: sysctl kern.ipc.nmbclusters=65536 By setting it to 65000 you will use 144 MB of memory and you should not go above that without adjusting the address space. Then this opens the ...


1

You can't do what you want with a single public IP address. When outside your network, even if you make the DNS return the private IP address of an internal node then the public internet will not route it for you. If you make the internal nodes external IP address the same as Server-A then server A will think the packets are for it.


1

Mulaz did come up with the right keyword: http://wiki.mikrotik.com/wiki/Hairpin_NAT Nat settings conflicts with my port forwarding settings on my router so sometimes a local dns server on a linux server may be required. Your mileage may vary.



Only top voted, non community-wiki answers of a minimum length are eligible