Tag Info

New answers tagged

0

It may seem counter-intuitive but only packets that conntrack doesn't know about go through the NAT table. This makes attempting to use string matching problematic for NATing: by the time the string appears in a packet the connection is already established. Usually using iptables string matching is ill-advised and you should do something at a higher layer ...


0

As it turned out, a simple postrouting rule did the trick. iptables -t nat -A POSTROUTING -s '10.10.10.0/24' -o eth0 -j SNAT --to 1.2.3.4 I also had to delete a bunch of MASQUERADE postrouting rules that were just creating a big mess.


0

You can try looking in the NAT and ARP logs and see whats there. There should also be connection logs somewhere (IP-->port). Otherwise wireshark the inbound connections to the VPN server and see who hits what. I have had success with this hunting down upstream and downstream devices from my Layer3 switch, but have not tried with a VPN server.


1

Add the additional IPs as IP Alias Virtual IPs. Then configure 1:1 NAT to ensure that traffic to/from each of your servers is mapped properly.


1

Most defiantly a VPN server or VPN Server Software on your home device or software tool like LetMeIn.. Since you do not have access to your ISP's Modem to do any kind of port forwarding. It really limits what you can do. If its just the data you need to access then maybe a cloud service like dropbox, onedrive etc. Then you can share the data you need. ...


1

VPN is your best option, because you dont have control over your ISP router, the issue must be on your server side network when goes to wan, if both host are Linux you can use OpenVPN here a Wiki of Open VPN on Debian: https://wiki.debian.org/OpenVPN


1

You need to use the PREROUTING chain to forward port : iptables -t nat -A PREROUTING -p udp -i eth0 -d 192.168.1.2 --dport 1003 -j DNAT --to-destination 192.168.1.2:1004 By the way, it seems filter is happening directly on the target host, so you could use REDIRECT in that case : iptables -t nat -A PREROUTING -i eth0 -d 192.168.1.2 -p udp --dport 1003 -j ...


-2

This part of the configuration is not correct: IGMP - WAN - (Proxy | UP) LAN - (Router V3 | Querier) Internal - ( - | -) You should delete: WAN - (Proxy | UP) Internal - ( - | -)


0

You cannot use a virtual interface as the argument to -i. The trick instead is to use the destination address: iptables -t nat -A PREROUTING -d 192.168.1.102 -j DNAT --to-destination 10.10.2.2


1

I would approach this by adding a static route on the default gateway in 192.168.1.0/24 network, which would say that all packets to 10.10.2.0/24 network would be routed via 192.168.1.101 node. Then, you would need to enable IP forwarding on 192.168.1.101. Then, you would also need to add route to 192.168.1.0/24 via 10.10.2.1 on Box B. This way you can ...


1

I'm guessing your listing of LAN1 and LAN2 as both 192.168.1.0/24 is wrong given the capture shows one is 192.168.16.0 and one is 192.168.67.0 apparently, hopefully both /24s. The static route filtering option has no applicability here. I'm guessing you either have overlapping networks (not a /24 mask on both, maybe /16 on some hosts), or one of the ...


3

iptables -L -t nat is what you're looking for. As you specify the table when you add the rule, you have to specify it to see it.


0

This is resolved! I was missing the following rule in my IPTables ruleset: iptables -t nat -I POSTROUTING 1 -o eth0 --jump MASQUERADE


0

I also experienced some issues connecting to my Raspberry Pi while connected to open hot spot (in my case it was Optimum WiFi) (SSH into my Raspberry Pi 2@Optimum WiFi - Raspberry Pi Stack Exchange). So, I'd like to share my way of getting into my Raspberry Pi 2 using this ssh reverse tunnel: pi@raspberrypi ~ $ crontab -l | tail -1 @hourly ssh -S ...


0

Nikita, you actually have a couple of options. I have setup RPs this way on dedicated power but with only a mifi card on a board. The simplest solution is to contact your ISP and request a public or static NAT IP address. Most wireless providers will do this but they may charge you for it. Verizon has a $500 charge per account but then you can setup as ...



Top 50 recent answers are included