Questions tagged [nat]
In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.
2,031
questions
0
votes
1
answer
31
views
Configuring destination NAT nftables entire subnet
Basically what I need is to change all packets destined to one subnet to a different subnet
I need this because my router has 2 VPNs and both of them use the same ip range [out of my control]
This is ...
1
vote
0
answers
45
views
In K8s network, why UDP packets are dropped by kernel?
In Azure I have two k8s services: serviceA and serviceB. serviceA's type is LoadBalancer, and set externalTrafficPolicy=Local
Client sends UDP packets to serviceA, serviceA transfer them to serviceB ...
-1
votes
0
answers
50
views
Windows RRAS NAT Behind Router in Passthrough
The configuration we are currently running is as follows:
Consumer grade router set to pass-through all traffic to the address 192.168.1.21
Windows Server 2022 with static IP address 192.168.1.21
...
0
votes
0
answers
19
views
Masquerading from a custom routing table does not work
In Ubuntu 22.04 server, masquerading/NATing from a custom routing table does not work (for VPN clients).
It does work however when I do not route traffic to a custom table (and let it remain in the ...
0
votes
0
answers
23
views
Virtualbox NAT configuration for HTTP port forwarding [migrated]
Hi I'm successfully installed Ubuntu server on virtualbox in macOS. Now, I want to access the ubuntu localhost either 0.0.0.0:8000 or 127.0.0.1:8080 in my host operating system.
I configured NAT port ...
0
votes
0
answers
58
views
Attempting to access Nginx from www (public internet network)
I have Nginx running successfully on my local network. Before I proceed with the question, here are the IP addresses:
Ubuntu Server Local IP Address: 192.168.29.110
Internet IPv4 IP Address: 45.8....
0
votes
0
answers
34
views
VPN netmap multiple sites with same LAN network address
I have some issues applying netmapping to a case for which I could not find much info about on the web.
I am trying to set up a VPN network (server ip: 10.1.0.1) where a user (VPN IP: 10.1.0.2) can ...
0
votes
1
answer
121
views
VM behind nat on Proxmox cannot reach port from internal network
The issue is that I am able to reach port 25 from outside (public internet) to the specific machine in the local network behind NAT, but cannot reach to port 25 on public machine e.g. hotmail-com.olc....
0
votes
1
answer
145
views
NAT between 2 LAN interfaces in Opnsense?
I'm not a network pro so some of my terminology may be off. I've tried to explain what I'm trying to achieve in different ways to hopefully make my request more understandable.
I have Opnsense running ...
0
votes
1
answer
29
views
No traffic is going through the NAT table in iptables
I have added just some rules to LOG packets going through the OUTPUT chains, but nothing goes through the NAT table at all. It is clear from the counter of NAT table chains here (which the counters ...
0
votes
2
answers
126
views
Microsoft Server 2019 - Limit Recursive DNS Requests to Internal Clients
We have a network with a router and an internal DNS on a Windows Server 2019. The DNS is visible to the outside via a NAT on the router (UDP 53 -> Server IP, this is required because we're a hidden-...
0
votes
0
answers
45
views
Benefits of extra DNS config for Google Cloud Private Google Access
Setup:
VM running in a subnet with public NAT enabled.
VM has only internal IP address.
VM needs to connect to Google APIs and services without traversing public internet.
Enabling NAT automatically ...
0
votes
0
answers
21
views
Is iptables NAT forwarding possible bewteen two libvirt VMs?
I'm building a test VPN setup using two libvirt VMs with StrongSwan
IKEv2 but can't get traffic to forward. I can see the client sending
traffic to the server using tcpdump but the server doesn't do
...
0
votes
1
answer
23
views
Restricting Ping Access to Public IP Only When VPN Connection is Active on Windows Server
I have configured a Windows Server with a public IP address and set up Routing and Remote Access. After configuring Routing and Remote Access, I selected custom settings and enabled NAT and VPN. I ...
0
votes
0
answers
54
views
OPNsense + HAProxy behind NAT
I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved.
So in short words trying to achieve this kind of logic:
Dedicated Server (Proxmox ...
0
votes
0
answers
28
views
Site-to-site VPN jump through 2 tunnels
I have 3 networks like on the below diagram:
network
Subnet A: 10.0.1.0/24, public IP of VPN Gateway: 55.0.0.1
Subnet B: 172.30.0.0/24, public IP of VPN Gateway: 66.0.0.1
Subnet C: 172.20.0.0/24, ...
-2
votes
1
answer
60
views
Can two LAN networks both at one level behind a router higher up the routing chain use the same subnet mask and network ID? [duplicate]
Can two LAN networks both at one level behind a router higher up the routing chain use the same subnet mask and network ID? See the diagram below.
This question was already answered here, but I am ...
0
votes
0
answers
33
views
Linux iptables/UFW - Exclude ONE host from nat
Currently I am using UFW to NAT two IPv4 Subnets to VPN Interfaces like this:
extract of /etc/ufw/before.rules:
# NAT table rules
*nat
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -s 192.168.1.0/24 -o ...
0
votes
0
answers
77
views
LTE Mikrotik NAT not works
I've and LTE Mikrotik HRBwAPGR-5HacD2HnD and QNAP NAS server.
My need was to route trafic to QNAP server (192.168.88.102) from internet(using DDNS and so on) but not able to perform it, maybe I'm ...
0
votes
1
answer
216
views
Connect two LANs without NAT in linux
I have a PC with address 192.168.3.2. It's connected to a router 192.168.3.1.
Router 192.168.3.1 is connected to another LAN with static address 192.168.88.6
Router at 192.168.8.1 provides an internet ...
0
votes
1
answer
74
views
Spoke VPC over VPN to IGW
Is it possible to modify this solution so a spoke VPC connects to the TGW hub over VPN, and that spoke VPC's internet access is centralized full tunnel?
https://aws.amazon.com/blogs/networking-and-...
0
votes
1
answer
93
views
Sending COA request to NAS behind NAT from Freeradius
My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
1
vote
2
answers
183
views
Looping forwarded and locally originating connections through port forwarding rules in firewalld
I have a Debian box running firewalld set up a as gateway NAT/router. This device has two NICS; wan --- public interface, assigned to the external firewalld zone, dynamically assigned IP address using ...
1
vote
1
answer
117
views
Strongswan VPN to AWS / connectivity issue / No response back to ping
I create a VPN between an ec2 with strongswan and aws vpn connection attached to a vpn gateway with dynamic routing (bgp).
Tunnel is UP. Ping is OK in one way DEST TO CLIENT but not the other way.
Can ...
0
votes
0
answers
140
views
Connection refused for http requests intermittently on multiple certain networks but not others, OPNSense Firewall, maximum confusion
I have been using an OPNSense firewall at my business for about a year now and its worked great. We use it to host some websites, an email server, and wireguard for remote connections. All on a ...
0
votes
1
answer
403
views
Use Windows as a router
I need a client application to connect to a server in a different network. Another computer is connected to both networks as shown here:
Client Computer ...
2
votes
1
answer
305
views
How to configure DHCP relay when NAT is also used?
I have a multi-homed application server that serves multiple networks that are not connected with each other (other than being all connected to the server, each one on its dedicated network interface)....
1
vote
2
answers
312
views
How to Configure Domain-Specific Port Forwarding on MikroTik Router?
I have a MikroTik router set up at the entrance of our office network. I'm looking to configure it for specific domain-based port forwarding. The task seems to be rather common, but I am stuck. Here's ...
0
votes
0
answers
52
views
Issue with Asterisk SIP Trunk: Payload Must Originate from Specific IP in Multi-Cloud Setup
I'm facing an issue with an Asterisk SIP trunk setup involving multiple cloud environments and a Session Border Controller (SBC). Our service provider, Airtel, requires that the SIP payload originates ...
1
vote
2
answers
130
views
How is it possible to connect multiple devices using the same IP to a machine with multiple interfaces and have them all work?
Long story short, I am a bit over my head with this task as I'm not incredibly well versed in networking and complicated network config. I have a few ideas, but want to avoid wasting time.
Background:
...
0
votes
1
answer
50
views
How to route traffic from private LAN to specific public remote host via alternate gateway?
Overview
I am trying to deal with the following scenario:
+------+ (Internet) 50.a.b.c +---------+
| edge + eth0 <-----------------------------> + outpost |
+--+---+ 25.u.v.w ...
0
votes
1
answer
152
views
How to proxy | forward | nat masquerade all traffic sourced from an IP to another IP elsewhere
I am setting up a new public network IP/24.
Sooner or later my old subnet public network IP/24 will be dropped.
In the meanwhile I would like to create a proxy to move all traffic to the OLD to the ...
1
vote
0
answers
59
views
SonicWall NAT64
I need to forward IPv6 packets to internal IPv4 server. Please see below my description and attempts made. I'm working with SonicWall appliance.
WAN interface has both IPv4 and IPv6 active. DNS is set:...
0
votes
0
answers
27
views
iptables port forwarding rules only work for first response packet
I have the following scenario:
+---------------+ +-------------+ +-------------------------+
| PC | | Linux | | Router ...
0
votes
1
answer
302
views
Windows Server 2019 RRAS lab can't make NAT and routing work together
I setup a lab, but i can't make it work.
The lab is:
network
I can access the internet via 10.0.0.254.
If i configure RRAS with static routing, i can access the other network. But i can't access the ...
0
votes
2
answers
660
views
nftables: hairpin / loopback NAT with dynamic IP
I've a Debian 12 server (public IP 85.xxx.xxx.xxx at enp6s0) running a bunch of LXC containers on a network bridge cbr0.
Since the public IP is dynamic I had to setup forward + prerouting rules with ...
0
votes
0
answers
64
views
Nat Local subnet to another gateway centos7
hi i have a centos 7 with ocserv and iptables installed
i wanted to route all OCserv teraffic to ip tunnel (which established and reachable)
my Server ip is 172.10.1.1
My OCSERV Users Subnet is : 192....
1
vote
0
answers
195
views
Use Node IP's instead of Pod IP's for egress with Secondary CIDR
I'm working with an Amazon EKS cluster that uses AWS VPC CNI for networking and has a custom network configuration. The primary IP address of the nodes is in the range 10.x.x.x/x, and there are ...
0
votes
1
answer
147
views
Forward (NAT) port on FW to the device without having GW set on it?
In short:
Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN?
Current setup:
I'm renting an ESXi server ...
0
votes
0
answers
40
views
Why showmount receive local IP(get error timed out)?
I configured NFS over WAN(Internet) on VPS. VPS in Moscow, me near, The ping over Internet is about 5ms
And mount work well(both on two clients, with CentOS and Ubunutu)
But showmount doesn't work on ...
0
votes
0
answers
55
views
SSL Cerificates blocked by VPN?
I have a server that hosts a website delivered via https on port 443. The website is not directly open to the public internet, but traffic is routed via a VPN from an EC2 instance that has a public ...
0
votes
0
answers
966
views
Use nftables to set up IPv6 NAT to IPv4
I am working on setting up a number of EC2 instances with IPv6-only networking.
A few of these servers require occasional access to IPv4-only resources controlled by third-parties.
Amazon has a blog ...
0
votes
1
answer
332
views
nftables masquerading is not working
I've a laptop (172.16.0.2) and a desktop PC (172.16.0.1). The phone is connected to the PC in USB modem mode, and it appears as the enp5s0f3u1 interface. I've set up masquerading through nftables so ...
0
votes
1
answer
223
views
wget/curl from internal network (web server) to external ip address (web server) connection failed
for some monitoring purposes on my own software i want to call wget with the "external" UR of the webserver, so my call will look like wget https://www.mydomain.de/path
But this call fails ...
0
votes
1
answer
173
views
Route an incoming ICMP packet to a different interface/process
I have an interface enp4s0 with several IPs.
I get ICMP packets (type 8, echo request) from external device to my device on enp4s0.
I'm trying to route only packets sent to 192.168.1.90 into another ...
0
votes
1
answer
135
views
Properly configuring iptables rules behind an openvpn server
hi friends hope everyone is doing well.
i got a little misunderstanding of how i should configure iptables v4 rules for an openvpn server.
if some wizard can give me a hint it would be great.
i'm ...
0
votes
0
answers
282
views
Assigning a fixed IP to a VM on Alma Linux
I have a Alma Linux 9 host with two IP addresses.
I want assign one IP to the host (This is already done) and the second one to a Ubuntu VM.
What's the best way to do this? I've set up the VM through ...
0
votes
0
answers
339
views
I cannot access website on VM in Hyper -V within LAN
Good day great minds,
i cannot access my webserver behind an nginx reverse proxy within my LAN network.
i have a mikrotic router with a LAN network 192.168.143.0/24, i deployed an hyper V server that ...
3
votes
2
answers
1k
views
AWS NAT Instance Setup
This question was originally posted to stack overflow, they suggested I repost it here (https://stackoverflow.com/questions/76715004/aws-nat-instance-setup).
I am currently learning the AWS cloud and ...
0
votes
0
answers
78
views
Port forwarding with iptables prerouting not work
I have 3 server
server A: 5.161.x.x
server B: 193.151.x.x
server C: 195.96.x.x
I want to forward all traffic from server B and C to server A
,i forwarded Server B to server A with this command:
...