Questions tagged [nat]

In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

Filter by
Sorted by
Tagged with
0 votes
1 answer
31 views

Configuring destination NAT nftables entire subnet

Basically what I need is to change all packets destined to one subnet to a different subnet I need this because my router has 2 VPNs and both of them use the same ip range [out of my control] This is ...
94230's user avatar
  • 1
1 vote
0 answers
45 views

In K8s network, why UDP packets are dropped by kernel?

In Azure I have two k8s services: serviceA and serviceB. serviceA's type is LoadBalancer, and set externalTrafficPolicy=Local Client sends UDP packets to serviceA, serviceA transfer them to serviceB ...
feiyu_guo's user avatar
-1 votes
0 answers
50 views

Windows RRAS NAT Behind Router in Passthrough

The configuration we are currently running is as follows: Consumer grade router set to pass-through all traffic to the address 192.168.1.21 Windows Server 2022 with static IP address 192.168.1.21 ...
aidenfarley's user avatar
0 votes
0 answers
19 views

Masquerading from a custom routing table does not work

In Ubuntu 22.04 server, masquerading/NATing from a custom routing table does not work (for VPN clients). It does work however when I do not route traffic to a custom table (and let it remain in the ...
Mustafa Mohiuodin's user avatar
0 votes
0 answers
23 views

Virtualbox NAT configuration for HTTP port forwarding [migrated]

Hi I'm successfully installed Ubuntu server on virtualbox in macOS. Now, I want to access the ubuntu localhost either 0.0.0.0:8000 or 127.0.0.1:8080 in my host operating system. I configured NAT port ...
AppNameExMin's user avatar
0 votes
0 answers
58 views

Attempting to access Nginx from www (public internet network)

I have Nginx running successfully on my local network. Before I proceed with the question, here are the IP addresses: Ubuntu Server Local IP Address: 192.168.29.110 Internet IPv4 IP Address: 45.8....
Daqs's user avatar
  • 101
0 votes
0 answers
34 views

VPN netmap multiple sites with same LAN network address

I have some issues applying netmapping to a case for which I could not find much info about on the web. I am trying to set up a VPN network (server ip: 10.1.0.1) where a user (VPN IP: 10.1.0.2) can ...
Daniel's user avatar
  • 1
0 votes
1 answer
121 views

VM behind nat on Proxmox cannot reach port from internal network

The issue is that I am able to reach port 25 from outside (public internet) to the specific machine in the local network behind NAT, but cannot reach to port 25 on public machine e.g. hotmail-com.olc....
EAK TEAM's user avatar
  • 103
0 votes
1 answer
145 views

NAT between 2 LAN interfaces in Opnsense?

I'm not a network pro so some of my terminology may be off. I've tried to explain what I'm trying to achieve in different ways to hopefully make my request more understandable. I have Opnsense running ...
user23401941's user avatar
0 votes
1 answer
29 views

No traffic is going through the NAT table in iptables

I have added just some rules to LOG packets going through the OUTPUT chains, but nothing goes through the NAT table at all. It is clear from the counter of NAT table chains here (which the counters ...
Kamran's user avatar
  • 1
0 votes
2 answers
126 views

Microsoft Server 2019 - Limit Recursive DNS Requests to Internal Clients

We have a network with a router and an internal DNS on a Windows Server 2019. The DNS is visible to the outside via a NAT on the router (UDP 53 -> Server IP, this is required because we're a hidden-...
Terminality's user avatar
0 votes
0 answers
45 views

Benefits of extra DNS config for Google Cloud Private Google Access

Setup: VM running in a subnet with public NAT enabled. VM has only internal IP address. VM needs to connect to Google APIs and services without traversing public internet. Enabling NAT automatically ...
user1069483's user avatar
0 votes
0 answers
21 views

Is iptables NAT forwarding possible bewteen two libvirt VMs?

I'm building a test VPN setup using two libvirt VMs with StrongSwan IKEv2 but can't get traffic to forward. I can see the client sending traffic to the server using tcpdump but the server doesn't do ...
dbazile's user avatar
0 votes
1 answer
23 views

Restricting Ping Access to Public IP Only When VPN Connection is Active on Windows Server

I have configured a Windows Server with a public IP address and set up Routing and Remote Access. After configuring Routing and Remote Access, I selected custom settings and enabled NAT and VPN. I ...
Harsh's user avatar
  • 1
0 votes
0 answers
54 views

OPNsense + HAProxy behind NAT

I am new to OPNsense/HAProxy and struggling for more than 3 days to make it works but unfortunately nothing achieved. So in short words trying to achieve this kind of logic: Dedicated Server (Proxmox ...
EAK TEAM's user avatar
  • 103
0 votes
0 answers
28 views

Site-to-site VPN jump through 2 tunnels

I have 3 networks like on the below diagram: network Subnet A: 10.0.1.0/24, public IP of VPN Gateway: 55.0.0.1 Subnet B: 172.30.0.0/24, public IP of VPN Gateway: 66.0.0.1 Subnet C: 172.20.0.0/24, ...
Frumbar's user avatar
-2 votes
1 answer
60 views

Can two LAN networks both at one level behind a router higher up the routing chain use the same subnet mask and network ID? [duplicate]

Can two LAN networks both at one level behind a router higher up the routing chain use the same subnet mask and network ID? See the diagram below. This question was already answered here, but I am ...
riverofwind's user avatar
0 votes
0 answers
33 views

Linux iptables/UFW - Exclude ONE host from nat

Currently I am using UFW to NAT two IPv4 Subnets to VPN Interfaces like this: extract of /etc/ufw/before.rules: # NAT table rules *nat :POSTROUTING ACCEPT [0:0] -A POSTROUTING -s 192.168.1.0/24 -o ...
user3528657's user avatar
0 votes
0 answers
77 views

LTE Mikrotik NAT not works

I've and LTE Mikrotik HRBwAPGR-5HacD2HnD and QNAP NAS server. My need was to route trafic to QNAP server (192.168.88.102) from internet(using DDNS and so on) but not able to perform it, maybe I'm ...
Victor  EStalin's user avatar
0 votes
1 answer
216 views

Connect two LANs without NAT in linux

I have a PC with address 192.168.3.2. It's connected to a router 192.168.3.1. Router 192.168.3.1 is connected to another LAN with static address 192.168.88.6 Router at 192.168.8.1 provides an internet ...
dmzkrsk's user avatar
  • 101
0 votes
1 answer
74 views

Spoke VPC over VPN to IGW

Is it possible to modify this solution so a spoke VPC connects to the TGW hub over VPN, and that spoke VPC's internet access is centralized full tunnel? https://aws.amazon.com/blogs/networking-and-...
aaaaaaaaaaa's user avatar
0 votes
1 answer
93 views

Sending COA request to NAS behind NAT from Freeradius

My Mikrotik NAS is behind a NAT so it only has a private network IP address. So for authentication, I am using the public IP address which works fine. But when Freeradius (hosted) has to send the COA ...
sajeyks mwangi's user avatar
1 vote
2 answers
183 views

Looping forwarded and locally originating connections through port forwarding rules in firewalld

I have a Debian box running firewalld set up a as gateway NAT/router. This device has two NICS; wan --- public interface, assigned to the external firewalld zone, dynamically assigned IP address using ...
3dg3's user avatar
  • 11
1 vote
1 answer
117 views

Strongswan VPN to AWS / connectivity issue / No response back to ping

I create a VPN between an ec2 with strongswan and aws vpn connection attached to a vpn gateway with dynamic routing (bgp). Tunnel is UP. Ping is OK in one way DEST TO CLIENT but not the other way. Can ...
geoffrey delnatte's user avatar
0 votes
0 answers
140 views

Connection refused for http requests intermittently on multiple certain networks but not others, OPNSense Firewall, maximum confusion

I have been using an OPNSense firewall at my business for about a year now and its worked great. We use it to host some websites, an email server, and wireguard for remote connections. All on a ...
Tjk's user avatar
  • 1
0 votes
1 answer
403 views

Use Windows as a router

I need a client application to connect to a server in a different network. Another computer is connected to both networks as shown here: Client Computer ...
Maxime's user avatar
  • 1
2 votes
1 answer
305 views

How to configure DHCP relay when NAT is also used?

I have a multi-homed application server that serves multiple networks that are not connected with each other (other than being all connected to the server, each one on its dedicated network interface)....
raj's user avatar
  • 512
1 vote
2 answers
312 views

How to Configure Domain-Specific Port Forwarding on MikroTik Router?

I have a MikroTik router set up at the entrance of our office network. I'm looking to configure it for specific domain-based port forwarding. The task seems to be rather common, but I am stuck. Here's ...
Dmitry Nikolaev's user avatar
0 votes
0 answers
52 views

Issue with Asterisk SIP Trunk: Payload Must Originate from Specific IP in Multi-Cloud Setup

I'm facing an issue with an Asterisk SIP trunk setup involving multiple cloud environments and a Session Border Controller (SBC). Our service provider, Airtel, requires that the SIP payload originates ...
George Muddu's user avatar
1 vote
2 answers
130 views

How is it possible to connect multiple devices using the same IP to a machine with multiple interfaces and have them all work?

Long story short, I am a bit over my head with this task as I'm not incredibly well versed in networking and complicated network config. I have a few ideas, but want to avoid wasting time. Background: ...
Douglas B's user avatar
  • 111
0 votes
1 answer
50 views

How to route traffic from private LAN to specific public remote host via alternate gateway?

Overview I am trying to deal with the following scenario: +------+ (Internet) 50.a.b.c +---------+ | edge + eth0 <-----------------------------> + outpost | +--+---+ 25.u.v.w ...
risclr's user avatar
  • 1
0 votes
1 answer
152 views

How to proxy | forward | nat masquerade all traffic sourced from an IP to another IP elsewhere

I am setting up a new public network IP/24. Sooner or later my old subnet public network IP/24 will be dropped. In the meanwhile I would like to create a proxy to move all traffic to the OLD to the ...
Max Cuttins's user avatar
1 vote
0 answers
59 views

SonicWall NAT64

I need to forward IPv6 packets to internal IPv4 server. Please see below my description and attempts made. I'm working with SonicWall appliance. WAN interface has both IPv4 and IPv6 active. DNS is set:...
rd1218's user avatar
  • 151
0 votes
0 answers
27 views

iptables port forwarding rules only work for first response packet

I have the following scenario: +---------------+ +-------------+ +-------------------------+ | PC | | Linux | | Router ...
J_S's user avatar
  • 101
0 votes
1 answer
302 views

Windows Server 2019 RRAS lab can't make NAT and routing work together

I setup a lab, but i can't make it work. The lab is: network I can access the internet via 10.0.0.254. If i configure RRAS with static routing, i can access the other network. But i can't access the ...
hutchuck's user avatar
0 votes
2 answers
660 views

nftables: hairpin / loopback NAT with dynamic IP

I've a Debian 12 server (public IP 85.xxx.xxx.xxx at enp6s0) running a bunch of LXC containers on a network bridge cbr0. Since the public IP is dynamic I had to setup forward + prerouting rules with ...
TCB13's user avatar
  • 1,238
0 votes
0 answers
64 views

Nat Local subnet to another gateway centos7

hi i have a centos 7 with ocserv and iptables installed i wanted to route all OCserv teraffic to ip tunnel (which established and reachable) my Server ip is 172.10.1.1 My OCSERV Users Subnet is : 192....
Keyvan Rahimi's user avatar
1 vote
0 answers
195 views

Use Node IP's instead of Pod IP's for egress with Secondary CIDR

I'm working with an Amazon EKS cluster that uses AWS VPC CNI for networking and has a custom network configuration. The primary IP address of the nodes is in the range 10.x.x.x/x, and there are ...
cris_karter's user avatar
0 votes
1 answer
147 views

Forward (NAT) port on FW to the device without having GW set on it?

In short: Is it possible to access the device/server (without the GW address set in the Network configuration of this device) from outside the device's LAN? Current setup: I'm renting an ESXi server ...
Leonid Pervak's user avatar
0 votes
0 answers
40 views

Why showmount receive local IP(get error timed out)?

I configured NFS over WAN(Internet) on VPS. VPS in Moscow, me near, The ping over Internet is about 5ms And mount work well(both on two clients, with CentOS and Ubunutu) But showmount doesn't work on ...
Andrew's user avatar
  • 1
0 votes
0 answers
55 views

SSL Cerificates blocked by VPN?

I have a server that hosts a website delivered via https on port 443. The website is not directly open to the public internet, but traffic is routed via a VPN from an EC2 instance that has a public ...
vascowhite's user avatar
0 votes
0 answers
966 views

Use nftables to set up IPv6 NAT to IPv4

I am working on setting up a number of EC2 instances with IPv6-only networking. A few of these servers require occasional access to IPv4-only resources controlled by third-parties. Amazon has a blog ...
Moshe Katz's user avatar
  • 3,182
0 votes
1 answer
332 views

nftables masquerading is not working

I've a laptop (172.16.0.2) and a desktop PC (172.16.0.1). The phone is connected to the PC in USB modem mode, and it appears as the enp5s0f3u1 interface. I've set up masquerading through nftables so ...
BlitDev's user avatar
0 votes
1 answer
223 views

wget/curl from internal network (web server) to external ip address (web server) connection failed

for some monitoring purposes on my own software i want to call wget with the "external" UR of the webserver, so my call will look like wget https://www.mydomain.de/path But this call fails ...
Opa114's user avatar
  • 113
0 votes
1 answer
173 views

Route an incoming ICMP packet to a different interface/process

I have an interface enp4s0 with several IPs. I get ICMP packets (type 8, echo request) from external device to my device on enp4s0. I'm trying to route only packets sent to 192.168.1.90 into another ...
hudac's user avatar
  • 136
0 votes
1 answer
135 views

Properly configuring iptables rules behind an openvpn server

hi friends hope everyone is doing well. i got a little misunderstanding of how i should configure iptables v4 rules for an openvpn server. if some wizard can give me a hint it would be great. i'm ...
infoman33's user avatar
0 votes
0 answers
282 views

Assigning a fixed IP to a VM on Alma Linux

I have a Alma Linux 9 host with two IP addresses. I want assign one IP to the host (This is already done) and the second one to a Ubuntu VM. What's the best way to do this? I've set up the VM through ...
Aaron Dewes's user avatar
0 votes
0 answers
339 views

I cannot access website on VM in Hyper -V within LAN

Good day great minds, i cannot access my webserver behind an nginx reverse proxy within my LAN network. i have a mikrotic router with a LAN network 192.168.143.0/24, i deployed an hyper V server that ...
deji's user avatar
  • 1
3 votes
2 answers
1k views

AWS NAT Instance Setup

This question was originally posted to stack overflow, they suggested I repost it here (https://stackoverflow.com/questions/76715004/aws-nat-instance-setup). I am currently learning the AWS cloud and ...
lobis's user avatar
  • 31
0 votes
0 answers
78 views

Port forwarding with iptables prerouting not work

I have 3 server server A: 5.161.x.x server B: 193.151.x.x server C: 195.96.x.x I want to forward all traffic from server B and C to server A ,i forwarded Server B to server A with this command: ...
Aref Solaimany's user avatar

1
2 3 4 5
41