Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [masquerade]

69 questions
6
votes
1 answer

Proxmox Nat Networking Issue

Definition I have installed Proxmox 3.2 and i am trying to configure a virtual machine as a communication server that handles all traffic and forwards them to the nodes with private ip. I configured server for NAT networking with two CentOS virtual…
efesaid
  • 368
  • 3
  • 5
  • 14
4
votes
3 answers

route cache filling with wrong entries

I have an issue with private network traffic not being masqueraded in very specific circumstances. The network is a group of VMware guests using the 10.1.0.0/18 network. The problematic host is 10.1.4.20 255.255.192.0 and the only gateway it is…
greg0ire
  • 316
  • 1
  • 6
  • 26
3
votes
0 answers

avoid packets being treated as "martians": is this thinking correct?

I have a cable connection with a Linux-based router. The router has two physical interfaces: enp1s0 (dhcp from cable provider) enp2s0 (192.168.1.1) with masquerading on enp1s0. then, I have an OpenVPN client connection: tun0 (10.0.0.4) Again, with…
rmalchow
  • 176
  • 6
3
votes
1 answer

CentOS 7 ip masquerade for internet access

My CentOS XYZ has two network interfaces: iface1 136.136.10.10 is connected to gateway 136.136.10.1 iface2 192.168.10.1 is connected to private network XYZ can access the internet through gateway 136.136.10.1 which is connected to the internet. My…
BestCoderEver
  • 31
  • 3
3
votes
0 answers

forward vpn traffic from tun1 to tun0

I've been banging my head on this for a while and gave up trying to figure it out. My knowledge about routing and iptables is just too limited to understand this it seems. I have configured a split routing situation on my openwrt router. one…
mrchrister
  • 31
  • 1
3
votes
4 answers

Almost working: How to set up iptables and iproute2 rules on dual WAN linux server?

I have a Raspberry Pi (running Raspbian) with three network interfaces (one ethernet and two USB wifi nics). What I want to achieve is this: I have two WAN connections to the internet (DSL + Cable), and I want to set up the RasPi in such a way that…
Rob
  • 184
  • 1
  • 12
2
votes
0 answers

natting ftp server inside lan with gateway port 1965

I want to forward access on my gateway (internal ip: 192.168.4.4) from external port 1965 to a FTP server inside my lan (192.168.4.2) So in other term, someone accessing with FTP my gateway:1965 will be redirected to 192.168.4.2:21 I did this in the…
Jérome Boham
  • 66
  • 3
2
votes
1 answer

Why IP masquerade (source NAT) in linux kernel fails to set source IP on high packet rates

I am trying to test throughput of the standard linux NAT. I have setup the following virtual network: [192.168.42.5] <--> [192.168.42.2:192.168.35.2] <--> [192.168.35.10] The middle host has 2 interfaces, runs ubuntu 14.04 and is configured as…
Necto
  • 163
  • 6
2
votes
0 answers

How to monitor the bandwidth per each iptables masqueraded device

Question: Which tool could I use to monitor and break-down in real-time which bandwidth is routed by iptables to which computers? Context: I have a linux box masquerading about 15 devices to internet with iptables with 3 ethernets (2 LAN, 1…
Xavi Montero
  • 295
  • 3
  • 16
2
votes
1 answer

OpenVPN running on Internet Gateway, so all private clients can access VPN with no config

Our LAN connects to our office gateway machine (192.168.1.1), which is connected to the Internet. I have setup NAT/Masquerading for this purpose with no issue. We also use OpenVPN to connect to our data-centre (the OpenVPN server is in the…
Rob Brown
  • 21
  • 1
2
votes
1 answer

firewalld: trouble forwarding port 25 while other ports forward just fine, "rich rule" logging shows NO entries

So, I installed Fedora Core 19 for the first time as a replacement for an older system whose disk had finally died. The system serves as a web server and gateway / firewall, protecting internal systems. Because it has a lot of network configuration,…
Richard T
  • 1,130
  • 11
  • 26
2
votes
1 answer

It is okay to set MASQUERADE at 2 network interfaces in a Linux server?

There is a Linux server with 3 network interfaces, eth0, eth1, eth2. IP forwarding has been turn on in this server. eth0 is connected to 10.0.1.0/24. Its IP is 10.0.1.1. eth1 is connected to 172.16.1.0/24. Its IP is 172.16.1.1. Server A can ping…
userpal
  • 593
  • 3
  • 9
  • 17
2
votes
1 answer

How to configure iptables rules for connecting 2 eth to the net (forwarding & masquerading)

need some help on configuring iptables rule for forwarding and masquerading Given I have these configuration: switch1 ---- (eth1) ----- router ---- (eth2) -----…
AjPrames
  • 21
  • 2
2
votes
2 answers

Why an iptables NAT does not happen in the network namespace separated transparent proxy setup?

I'm trying to setup transparent proxying networks on my host. Real Client and Proxy targets are containters but in this experiment I use netns (network namespace) separated envinroment. To redirect client traffic to proxy transparently, I use policy…
Chul-Woong Yang
  • 123
  • 7
1
vote
1 answer

How to preserve external IPs through gateway to keep using Fail2Ban

I have a CentOS 7 box with 2 NICs acting as a gateway; one NIC is connected to the internet while the other NIC is connected to our LAN. The first NIC belongs to the 'external' zone of firewalld, it has masquerading on and is set to forward port 22,…
Francesco
  • 45
  • 9
1
2 3 4 5