Jan van der Vyver wrote: > Hi All > > I have the following setup > > > > > Users ------- Machine A ----------- Machine B ----------- Machine C > > >>From machine A to B: > > Ipsec VPN > Allows 192.168.10.0/24 (Users) to connect to 192.168.20.0/24 (Network on > machine B) > > >>From machine B to C: > > Ipsen VPN > Allows 196.44.33.118 to coccent to 192.168.241.65 (machine C) > > I want to rewrite 192.168.20.33 to 192.168.241.65 > > This can be done with the following rule on Machine B: > > DNAT:info net:192.168.10.0/24 net:192.168.241.65 all - > - 192.168.20.33 > > But for that packets to go to 192.168.241.65 the source must be also > rewritten to 196.44.33.118. > > Any ideas?
In Shorewall, all source address rewriting is accomplished using entries in /etc/shorewall/masq. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
