Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [masquerade]

The tag has no usage guidance.

0
votes
1answer
21 views

Need correct iptable rules for NAT instance to prevent loop back for private subnet EC2 instance outgoing traffic

My AWS architecture has a public subnet having a NAT instance. It forwards the traffic on certain ports to my EC2 instance hosted in a separate private subnet. sudo iptables -t nat -A PREROUTING -...
1
vote
1answer
12 views

How to NAT private IP to public IP through virtual LAN in centos 6

Guys i am having an issue with NAT on centos. In my LAB Centos is configured as a router. I want to run my local system (example: 192.168.1.45) apache server on live IP (example 112.100.4.34). This ...
0
votes
2answers
55 views

Any drawbacks to to using nat MASQUERADE with no source constraint (in a typical simple VPS setup)

Situation: A VPS already serving web pages via nginx. Now I am adding OpenVPN for roaming devices to this VPS. One installation for the VPN guide suggests adding this MASQUERADE rule - iptables -A ...
0
votes
0answers
20 views

Kvm guests cannot access internet

I have a kvm host and 4 kvm guests using default kvm nat networking. Using ip pool 192.168.100.0/24 for kvm guests. It seems that for some reason masquerading/or something else is not working properly ...
0
votes
1answer
237 views

Unable to NAT TFTP traffic because iptables is not forwarding the return connection to the client despite TFTP helper creating an expectation

The Problem I have a TFTP server (Machine 'S') and a TFTP client (Machine 'C') on different subnets. They are connected via a router( Machine 'R'). All 3 machines are Debian 9/Stretch. The router is ...
0
votes
0answers
31 views

MASQERADE iptables rule not being hit inside docker conatiner

I am trying to route traffic via an OpenVPN tunnel which is running inside a docker container, but cannot get NAT to work +---------------------+ +-------------------+...
1
vote
1answer
32 views

Windows 98 routing issue [closed]

I have following network setup: Main router connecting to internet, with LAN address 192.168.1.254 Secondary router connected to first router, with LAN address 192.168.2.1 I have two PC's connected ...
0
votes
0answers
104 views

Centos IP Routing and NAT failover with two WAN interfaces

I have a server with 4 interfaces. 2 WAN interfaces, 1 LAN interface, and one Management interface. The server runs Centos 7 Minimal. My interfaces are: ens161 = WAN1 ens192 = WAN2 ens193 = LAN1 ...
0
votes
1answer
1k views

Redirecting masqueraded traffic through TOR

I am trying to configure AP with redirection incoming traffic through TOR. My AP now has 2 network interfaces: eth0 - have internet access (192.168.1.92/24) wlan0 - intranet, without internet (10.0.0....
-3
votes
0answers
87 views

How to use private IP address in router machine [closed]

I would like to use 192.168.11.1, but use global IP address againt my will. I would not like to use global IP address in router when Im usging web browser and client applications. How do I do ? Now:...
0
votes
1answer
79 views

Linux IP-tables Forwarding loose Source IP on access.log [closed]

Team, We have configured IP tables with forwarding request coming on eth1(public IP x.x.x.x) interface to other server. We are able to forward all requests but problem is loosing origin public IP(...
0
votes
0answers
600 views

How do I get a PPTP server to have a static IP address per client?

I have an Ubuntu 16.04 server running a PPTP server. The server is running fine, the pptp.conf file has the following: localip 10.1.1.2 remoteip 10.1.1.3-252 The chap-secrets file is setup to give ...
0
votes
0answers
579 views

Router with DHCP in Centos 7? Where can be an error in settings?

I'm looking for a thorough tutorial on how to configure: Modem (77.77.7.76) -> Centos 7 -> 192.168.1.0 -> DHCP -> 100 host Please look at my configuration. Two network interfaces: enp0f0 enp0f1 On ...
-1
votes
1answer
336 views

firewalld masquerade control [closed]

for various reasons I have had to adopt CentOS 7 as a public facing firewall machine implementing NAT and a few other bits and pieces. Seems easy enough. My basic strategy is to assign the outside ...
0
votes
0answers
541 views

How do I force a docker container to use a specific host IP for _outgoing_ connections

tldr: I'm trying to set up a server in a docker container making outgoing calls with a specific IP. But for the moment, my outgoing connections uses the wrong host IP. What are the best ways to set ...
2
votes
0answers
122 views

natting ftp server inside lan with gateway port 1965

I want to forward access on my gateway (internal ip: 192.168.4.4) from external port 1965 to a FTP server inside my lan (192.168.4.2) So in other term, someone accessing with FTP my gateway:1965 will ...
1
vote
0answers
27 views

Same network, two interface cards, hosts behind different networks

Can anyone help with this? I have a gadget that has a fixed IP address 10.0.0.2, which I cannot change. It needs to talk to my laptop, which in turn needs to talk to the internet. My main network ...
0
votes
1answer
2k views

How to Access a host behind a server over VPN (IP Forwarding)

I have an Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, ...
1
vote
2answers
606 views

Is it possible to masquerade a packet on a bridge?

I have a container which has an incoming VPN. A connection into that container will be assigned the 192.168.10.10 IP. The virtual NIC of the container has an IP of 10.10.10.1 and a gateway (on the ...
4
votes
0answers
163 views

avoid packets being treated as “martians”: is this thinking correct?

I have a cable connection with a Linux-based router. The router has two physical interfaces: enp1s0 (dhcp from cable provider) enp2s0 (192.168.1.1) with masquerading on enp1s0. then, I have an ...
1
vote
1answer
272 views

NAT Masquerading second container network

I have 1 public IP, and would like to share internet connection to LXC containers running Centos (in this setup) the host runs proxmox (debian based). If I understand correctly, i need NAT ...
0
votes
1answer
453 views

netperf + iptables masquerade -> network unreachable

Why iptables rules pass netperf TCP_STREAM test through, but break UDP_STREAM? I have a network: +---------------+ | | [client]--[NAT]--[server] On the NAT, I have added the ...
2
votes
1answer
373 views

Why IP masquerade (source NAT) in linux kernel fails to set source IP on high packet rates

I am trying to test throughput of the standard linux NAT. I have setup the following virtual network: [192.168.42.5] <--> [192.168.42.2:192.168.35.2] <--> [192.168.35.10] The middle host ...
1
vote
1answer
109 views

DNAT for connecting a subnet via proxy to the internet

DNAT for connecting a subnet via proxy to the internet I want to connect a server in a subnet to the internet via a proxy-server. But I can’t ping a host on the internet (www). Actually the subnet-...
1
vote
1answer
1k views

ICMP ECHO REPLY is not being SNATed correctly

I am trying to provide L3 connectivity between two remote LAN networks (10.0.0.0/24, 10.0.1.0/24) using OpenVPN with the following setup: +----------------+ +---------------------+ +----------------...
3
votes
1answer
819 views

CentOS 7 ip masquerade for internet access

My CentOS XYZ has two network interfaces: iface1 136.136.10.10 is connected to gateway 136.136.10.1 iface2 192.168.10.1 is connected to private network XYZ can access the internet through gateway ...
2
votes
0answers
539 views

forward vpn traffic from tun1 to tun0

I've been banging my head on this for a while and gave up trying to figure it out. My knowledge about routing and iptables is just too limited to understand this it seems. I have configured a split ...
0
votes
1answer
241 views

iptables DNAT to external IP without masquerading does not work

On server 1.1.1.1: iptables -t nat -A PREROUTING -p tcp --dport 20000 -j DNAT --to-destination: 2.2.2.2:20000 iptables -t nat -A PREROUTING -p tcp --dport 20000 -j LOG --log-prefix pre20k iptables -...
1
vote
0answers
157 views

Using DeamonPortOptions to fix DKIM signing with genericstable masquerading

I'm sending mails from my debian server with sendmail. I want to be able to send mail with multiple domains using masquerading with genericstable. I am signing the mails with OpenDKIM but because ...
2
votes
0answers
479 views

How to monitor the bandwidth per each iptables masqueraded device [closed]

Question: Which tool could I use to monitor and break-down in real-time which bandwidth is routed by iptables to which computers? Context: I have a linux box masquerading about 15 devices to ...
0
votes
1answer
862 views

Keep source port for outgoing packets

I have 2 interfaces eth0(192.168.0.1) and eth1(10.1.1.15). And I do nat for all packets in this way. iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE Now I want to keep source port ...
4
votes
1answer
8k views

Proxmox Nat Networking Issue

Definition I have installed Proxmox 3.2 and i am trying to configure a virtual machine as a communication server that handles all traffic and forwards them to the nodes with private ip. I ...
1
vote
0answers
1k views

Unable to setup wlan0/ppp0 bridge

Don't know how many hours/days I have into this 'simple' problem, but I'm stuck... What I'm attempting to do is connect an eth0/wlan0 bridge to a ppp session (in other words share a ppp connection to ...
0
votes
0answers
211 views

Simple MASQUERADE NAT between 2 VM

I'm on a cloud service and I'm trying to set up NAT between two VM. I've never experienced issues in this simple step, but this time is different and I'm near to give up. The first VM had two ...
0
votes
0answers
186 views

NAT answers instead of remote host

Currently I have VPN client access set up on OpenSuSE 13.1 server to third-party remote Cisco VPN IPSec server. VPN Server is set up to provide access for a host only and to provide access for a local ...
1
vote
0answers
243 views

Postfix on Linux: easy way of masquerade_exceptions=<all system users>?

... well, the subject says it: in a NULLCLIENT configuration, we want to have all normal users to be masqueraded, but all system users should be exposed. The sysadmins get system user's mails from a ...
0
votes
1answer
700 views

Send an email from exim to another SMTP server strippping the local envelope

I manage a service that recently switched to AWS/EC2 but we have several IP addresses with great email reputation that we'd like to keep sending the email through. We've set up exim to be a satellite ...
0
votes
2answers
616 views

Network remapping with iptables and PPTP VPN

I have two different networks: Home network 192.168.1.0/24 A - Home PC (192.168.1.100) B - Home Router (192.168.1.1 lan ip - x.x.x.x public ip) Office network 192.168.1.0/24 C - File Server (192....
2
votes
1answer
127 views

OpenVPN running on Internet Gateway, so all private clients can access VPN with no config

Our LAN connects to our office gateway machine (192.168.1.1), which is connected to the Internet. I have setup NAT/Masquerading for this purpose with no issue. We also use OpenVPN to connect to our ...
4
votes
3answers
2k views

route cache filling with wrong entries

I have an issue with private network traffic not being masqueraded in very specific circumstances. The network is a group of VMware guests using the 10.1.0.0/18 network. The problematic host is 10.1....
-1
votes
2answers
1k views

Iptables MASQUERADE: What is the advantage/disadvantage between these two commands? [closed]

What is the advantage/disadvantage between below 2 commands: iptables -t nat -A POSTROUTING -o eth0 -s 10.0.0.0/16 -j MASQUERADE AND iptables -t nat -A POSTROUTING -j MASQUERADE Some Background ...
0
votes
3answers
395 views

CentOS masqueraded network with iptables clients not connecting: Unable to ping

I'm a novice sysadmin working on a system with a CentOS server masquerading traffic with client machines also running CentOS. Something with the tables got messed up and my clients no longer have ...
3
votes
4answers
8k views

Almost working: How to set up iptables and iproute2 rules on dual WAN linux server?

I have a Raspberry Pi (running Raspbian) with three network interfaces (one ethernet and two USB wifi nics). What I want to achieve is this: I have two WAN connections to the internet (DSL + Cable), ...
0
votes
1answer
48 views

Postfix mail server taken over by spammers following update of environment despte countermeasures

Long configured, stable Postfix mail server on internal system with greylisting, a long list of restrictions and real-time black-listing, reachable through a gateway / firewall via forwarded port ...
2
votes
1answer
986 views

firewalld: trouble forwarding port 25 while other ports forward just fine, “rich rule” logging shows NO entries

So, I installed Fedora Core 19 for the first time as a replacement for an older system whose disk had finally died. The system serves as a web server and gateway / firewall, protecting internal ...
1
vote
0answers
61 views

what is PAT exactly?

In attempt to understand PAT, I've setup the following setup where I have a Linux Router that masquerades from in internal interface to the external. Thus both clients are able to talk to outside ...
2
votes
1answer
4k views

It is okay to set MASQUERADE at 2 network interfaces in a Linux server?

There is a Linux server with 3 network interfaces, eth0, eth1, eth2. IP forwarding has been turn on in this server. eth0 is connected to 10.0.1.0/24. Its IP is 10.0.1.1. eth1 is connected to 172.16.1....
1
vote
2answers
6k views

limit ip Masquerade to certain ip range

I'm using the entire 10.0.0.0/8 subnet on the private side. I want to allow a certain section of the subnet (say 10.0.0.2 - 10.0.31.254) to access the internet via linux router but not the rest of ...
1
vote
1answer
1k views

How to configure iptables rules for connecting 2 eth to the net (forwarding & masquerading)

need some help on configuring iptables rule for forwarding and masquerading Given I have these configuration: switch1 ---- (eth1) ----- router ---- (eth2) ----- switch2      ...
0
votes
1answer
775 views

Intermittent access to HTTPS sites through iptables MASQUERADING

The problem: everything is fine on the network, except every once in a while, all https times out for all the hosts on the network. After a few minutes it goes back to being near-instant for several ...