Hi Folks,

Last week I asked if I could spoof ARP responses to try and forward IP traffic 
through my firewall. The problem being that I need to connect my network to 
someone else's who is using part of the same subnet - no IP address conflict 
tho'.

Now I'm wondering if I could use IP aliasing - more than one IP address on one 
NIC, and then set up some IPCHAINS or IPTABLES to forward that traffic on a 
different i/f.

Ideally, I'd like a node on my network to connect to 10.1.0.34 by sending the 
packets to 10.1.1.115 and then have that traffic NAT'd as 192.168.105.1 
routed to 192.168.105.2. Obviously response packets being unNAT'd and 
forwarded back to the host.

Here's a rough schematic.

        ||
        || My network traffic 
        ||
-----------------------
|    10.1.1.115       |
|  aliases 10.1.0.1,  |
|    10.1.0.34 etc    |  Firewall
|                     |
|   192.168.105.1     |
|---------------------|    
        ||
        ||  (NAT'd traffic)
        ||
-----------------------
|  192.168.105.2      |
|                     |
|  rest of the world  | Router
|                     |
-----------------------

-- 
Gary Stainburn
 
This email does not contain private or confidential material as it
may be snooped on by interested government parties for unknown
and undisclosed purposes - Regulation of Investigatory Powers Act, 2000     



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to