2022 Developer Survey is open! Take survey.

Questions tagged [nat]

In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Issues configuring strongSwan client on AWS instance for site-to-site VPN

I am trying to setup a IPSec VPN client on a debian-10 AWS instance. Unfortunately, I do not have access to the VPN server as it is configured by another party, so all I know is they told me it is ...
user avatar
  • 101
-1 votes
0 answers
5 views

How to send packets to internet through nat adapter from subnet connected by lan adapters

I need to implement this network. All computers should have access to internet. Currently, I can access it only through G. I have this default route on G. When I'm trying to tracert google.com, ...
user avatar
-2 votes
0 answers
22 views

How can I set up domain-name-access to home server using cloud server with public IP and VPN? [closed]

srv_pub srv_target +-----------------+ +---------------------+ Internet | VPS | VPN 10.8.0.0/24 | HOME SERVER | -------...
user avatar
0 votes
0 answers
29 views

ICMP TTL exceeded replies with destination IP from NAT router

I'm playing with nftables and observe strange behaviour which I cannot explain. I have three VMs, source, router and destination. All run latest Oracle EL 8.5 and are configured via nft. source has ...
user avatar
  • 1
0 votes
0 answers
19 views

IPv6 access to site behind OpnSense

I am new to IPv6. I have dedicated server with both IPv4 (single external IP 135.x.y.z) and IPv6 network 2a01:abc:def::/64). Within this server I have few VMs and 2 networks (WAN and LAN). OpnSense ...
user avatar
0 votes
1 answer
31 views

Exposing an internal IP to the internet on GCP

Be warned, noob question here. I want to play around with GCP AlloyDB. I have created a cluster and it has been assigned an internal IP. This is fine for applications running in the same VPC/ project ...
user avatar
1 vote
1 answer
45 views

IP forwarding with IPTables for lvs nat mode

I am learning about the L3 loadbalancers and now working on the keepalived NAT mode.The packet flow should be Client ------> L3(lvs DNAT)------> real servers and the return flow should be exact ...
user avatar
1 vote
0 answers
9 views

ECS task to VPC endpoint/NAT Gateway routing

we have an ECS task that makes Rest API calls of two types: /path1 and /path2 in a Private subnet. We route the requests to Internet Gateway through a NAT gateway present in a public subnet. Flow: ECS ...
user avatar
  • 11
0 votes
0 answers
15 views

Get Real Address wen Login Winbox Mikrotik

I have two mikrotik router which connected with vpn. The router configuration like this Router CORE PUBLIC IP : 66.96.234.199/32 IP VPN : 172.1.23.1 Router Client IP VPN : 172.1.23.33 I've port ...
user avatar
-1 votes
1 answer
19 views

VPN overlapping with network that provides access to internet

I have computer which is connected to Network A with ip range 10.0.0.0/24. This network provides access to internet and that's the only thing I need from Network A. My comporate VPN (Network B) using ...
user avatar
  • 99
1 vote
1 answer
28 views

Properly configuring iptables for two layers of port forwarding: external server connected to local server via VPN

I had a minecraft server running on a VPS (Debian 10), but the VPS was too puny to handle it so I wanted to use a beefier local server to run it (Ubuntu 22.04). The VPS is hosting an OpenVPN server, ...
user avatar
  • 11
0 votes
0 answers
15 views

iptables: how does NAT Instance handle the traffic from the connection initiated from outside?

AWS allows developer to create an NAT instance in the public subnet, and provide private subnet the ability to access the internet. Here is the precedure to create the NAT instance. For the iptables ...
user avatar
  • 103
0 votes
0 answers
35 views

NAT port to internal node

We are working with a PLC (phoenix plc next) which connects to a profinet (and profibus) network. Due to lack of tooling and being unable to rewire things to our needs (the PLC is integrated in our ...
user avatar
  • 133
0 votes
0 answers
12 views

RUT 950 router to send data over the internet

I also have a similar question but I am not able to follow up the above chat. Can anyone help me in understanding this? I have some devices in LAN. Through the router I would like to send data outside ...
user avatar
0 votes
0 answers
30 views

Routing Issue: Load Balancer with multiple external NICs

Single Unix-based load balancer (LB) is configured with multiple network interfaces - 2x external and 1x internal. The LB sits in front of a DNS resolver. The issue I'm trying to solve is that all DNS ...
user avatar
  • 1
0 votes
0 answers
27 views

I can SSH to VM but can't open server content from browser from another PC on the LAN

I have Ubuntu 20.04 VM on Windows 11 host. The network is NAT Windows 11 host IP = 192.168.10.25 VM IP = 10.0.2.25 ufw is inactive NAT ports forwarding rules on VirtualBox: Rule #1: SSH Protocol: TCP ...
user avatar
0 votes
0 answers
22 views

Configure "forward proxy" or DNAT in the docker with multiple public IP

I'm trying to find answers and a possible solution on the questions regarding forward proxy, docker and multiple network interfaces/public ip. I hope that I will get answers on them here. I have an ...
user avatar
1 vote
1 answer
142 views

Why is my Azure VPN Gateway-NAT rule not working?

I have a very simple scenario, Azure Vnet with a subnets 10.140.1.0/24 (GatewaySubnet, SKU=Gw2 gen1) and 10.140.10.0/24 (VirtualMachineSubnet). Then an OnPrem network with 10.190.0.0/16. I have a ...
user avatar
0 votes
0 answers
202 views

Redirecting traffic to a bridged ip and port using PF on MacOS

I am trying to redirect localhost traffic on specific port to bridged network ip I am using following echo " rdr pass inet proto tcp from any to any port 9300 -> 192.168.64.29 port 9300 rdr ...
user avatar
  • 101
2 votes
1 answer
167 views

How is CGNAT routed on the client?

When testing a Zscaler POC (from a security perspective), I had a hard time understanding how CGNAT is routed on the client. My main concern (and question) is that the 100.64.x.y route is not in the ...
user avatar
  • 3,317
0 votes
1 answer
75 views

What does exactly break with double NAT?

There are many warnings about double NAT networks. DSL---modem with router-----second router configured by ISP inner network first NAT second NAT What will exactly break ...
user avatar
0 votes
1 answer
12 views

Debian Redirect Single Port of Outbound Connection

I have a Debian 11 VM on a Windows machine. It has 3 network adapters. One is external (WAN), one internal (LAN) and another private (experimental). I am using the box as a router which in turn uses ...
user avatar
1 vote
1 answer
396 views

Wireguard forward traffic to host

I'm using Wireguard as docker container on a pi. I'm running a couple other services on the pi that I want to be only accessible over the wireguard connection. The wireguard server created an ...
user avatar
  • 11
0 votes
0 answers
40 views

Azure Vpn Gateway with IP Range conflict - workarounds?

First of all I am fairly new to network topics and Azure itself, so maybe I might oversee a trivial solution here. We have a production system in Azure and some of our customers want to connect via ...
user avatar
0 votes
0 answers
24 views

iptables loses source address when forwarding to an internal virtual machine (Proxmox)

I have a Proxmox hypervisor. This proxmox is running a VM with HAProxy load balancer. I am now trying to forward to this HAProxy via iptables port 80 and 443. Unfortunately the source address is lost ...
user avatar
  • 101
0 votes
0 answers
30 views

tun0 doesn't forwards network

(wlan0 -> tun0) Ubuntu desktop "A" (eth0) -> (eth0) other Ubuntu desktop "B" I have an OpenVPN connection on "A". OpenVPN server is from a Mikrotik RouterBoard. I ...
user avatar
  • 21
0 votes
0 answers
47 views

How to use aggressive mode + transport mode + PSK to negotiate SAs with strongswan server in NAT-T environment

I used the transport mode and NAT-T environment to negotiate SAs, and the method to authenticate the peer is PSK. When I use Main Mode, IKE negotiation can be completed normally, the logs of PSK is: ...
user avatar
0 votes
0 answers
48 views

can't get iptables to handle more than 1.5 million nat sessions

I am trying to see how many NAT sessions I can handle in a single linux machine using iptables. I am testing it using a large number of udp packets but I can't seem to pass 1.5 million. I set net....
user avatar
  • 131
0 votes
0 answers
39 views

OpenVPN iptables forwading

Following setup: openvpn server with public ip, mobile clients and at home a raspberry that act as vpn gateway. All mobile clients get a route from the openvpn server so that they I can connect into ...
user avatar
0 votes
0 answers
63 views

How to health check a distributed NAT gateway?

I am using Google Cloud Platform and have manually setup a NAT gateway to peer two networks A and B so that workloads in network A have a default gateway which routes packets into network B. The ...
user avatar
  • 233
0 votes
1 answer
44 views

Does NAT leave a trace of the internal source?

I was wondering if there is any trace left of the original source when a packet leaves NAT. Let’s say I do a series of DNS requests from my machine to a public server. I’m behind NAT. Can the server ...
user avatar
  • 101
1 vote
0 answers
58 views

How to bind an external IP address to a new NetNat network?

On my Hyper-V 2019 server, which is joined to the domain that's hosted on one of its VMs, I'm running on the 192.168.0.0/24 subnet. I'm setting up a demo of a new DC for a customer, so I need it to ...
user avatar
  • 703
0 votes
1 answer
66 views

Is it OK, to use iptables SNAT rule with inverted -o parameter?

Would it be OK/reliable, to use just one rule?: iptables -t nat -I POSTROUTING ! -o eth2 -s 192.168.10.0/24 -j SNAT --to PUBLIC_IP_ADDRESS The BGP linux router has 25 ethernet interfaces. This ...
user avatar
0 votes
0 answers
59 views

NAT interface after OVPN client connection

I'm looking for advice for this special case. What I want to achieve: my gateway should dial PPPoe, should establish OVPN connection as client to my OVPN server. Internet users from outside should ...
user avatar
  • 13
1 vote
1 answer
146 views

What is UDP Masquerading behavior when forwarding and listening on the same port to the same remote address?

Assuming the following: ||netns2|<-kernel routing-> netnsRoot| <-network routing-> |remote server| netns2 is a network namespace has a client that connects to the UDP server on UDP/5060 ...
user avatar
0 votes
1 answer
206 views

Iptables Port-forwarding while preserving client IP

TL;DR: How can I get the client ip connecting to a remotely hosted VPS to be the IP that gets forwarded/natted, via iptables, to a game server running at my house? I have a Rust game server that I am ...
user avatar
  • 3
0 votes
1 answer
101 views

Destination NAT onto the Same Network in AWS using IPTables

In AWS we have 3 instances in the same subnet/VPC. We would like to have the client instance make a DNS request to a second analysis instance, which will then forward the request to a third instance ...
user avatar
  • 377
0 votes
1 answer
42 views

How to proxy ftp connection between IPV4 server to an IPV6 client and vice versa

We have a gateway solution which connects legacy RADIO's having ftp server running with IPV4 interface to DU's running with IPV4 ftp clients to do file upload and download operations. And currently we ...
user avatar
  • 1
0 votes
0 answers
47 views

Debian with 2 ethernet as VPN relay (route all traffic from eth0 to eth1 VPN)

Background I got 2 Debian VMs, first one is pptp/wireguard server on WAN 10.10.0.1 and second one's eth0 192.168.100.1, eth1 172.16.100.1. Note: WAN IPs written in private ranges Intentionally ...
user avatar
0 votes
1 answer
52 views

Should I do the stateful matching with iptables for nat table?

I often see that there are some stateful matching rules in a iptables' chain such as INPUT. I known what they are doing, and I'm interested in that Should I do the same for the chains of the table ...
user avatar
  • 137
1 vote
2 answers
3k views

Why does everybody use MASQUERADE/SNAT instead of NAPT/PAT?

Story I have a VPN wireguard virtual interface wg0 (can be anything else) and a physical interface eth0. I want to route packets from the VPN to my LAN, or from an interface to another interface. ...
user avatar
  • 152
0 votes
0 answers
23 views

Linux virtual machine in VMware15 cannot use custom DNS?

The virtual linuxmint system in VMware 15 cannot resolve the domain name using 8.8.8.8, but the domain name can be resolved normally by setting the DNS to be the same as the gateway IP. In the virtual ...
user avatar
  • 1
0 votes
0 answers
680 views

Redirect 127.0.0.1:80, 127.0.0.1:443 and 127.0.0.1:8080 to an Hyper-V virtual machine

Alright so the title may be a little misleading but that's the best I could find. Here is what I am trying to accomplish: I am on Windows 11 Pro. I have a virtual machine running Debian 11 on Hyper-V. ...
user avatar
0 votes
1 answer
84 views

Two clients behind NAT on a single VPN connection, exting on two separate public IPs

I am looking for a way to forward outgoing traffic on separate IPv4 addresses for different clients connected through the same VPN tunnel, behind NAT. Right now I am forwarding port 44158 from ...
user avatar
0 votes
0 answers
52 views

Iptables hitcount instantly blocks ssh

Need some help with iptables. I always use to have vps with public ipv4 ip and used these rules in iptables to block ssh connections that tried to connect too many times. -A INPUT -p tcp -m tcp --...
user avatar
  • 11
0 votes
0 answers
65 views

We are testing strongswan from aws to a cisco ASA: no matching CHILD_SA config found

We are trying to build a VPN from a strong wan (in an ubuntu server in AWS) to our Cisco ASA in our Office network. In the ASA we have a server (private ip 172.16.3.7 natted to a Public IP: 66.172.xxx....
user avatar
0 votes
0 answers
48 views

How to share VPN network access

I have got this setup with two LANs and OpenVPN infra. I need to share the OpenVPN connection attached to Proxmox server (10.8.0.12) to the Proxmox VMs (192.168.0,1,2,3,...). I was trying to use linux ...
user avatar
  • 1
0 votes
0 answers
61 views

Does AWS Educate allow the creation of NAT gateways?

I am trying to have quick access to the internet from a private subnet. I get this error message when creating a NAT gateway: There was an error creating your NAT gateway You are not authorized to ...
user avatar
  • 123
2 votes
2 answers
189 views

load balancing over single NIC to overcome per-connection limit

I have a strange setup where the ISP provides a very fast connection (10 Gbps) but limits each connection to 50 Mbps. This is fine for multi-threaded applications where I can just boost the number of ...
user avatar
0 votes
0 answers
64 views

SNAT port of Kubernetes outgoing traffic

I am currently running Kubernetes with Calico v3.20.2 as the CNI. I have a very unique case where I need to send UDP traffic from a specific DaemonSet Pod to an external server which will read the ...
user avatar

1
2 3 4 5
39