Difference between revisions of "NAT Linux"
From Teknologisk videncenter
m |
m (→Basic NAT using IP Tables) |
||
| Line 4: | Line 4: | ||
*Redhat | *Redhat | ||
*Centos | *Centos | ||
| − | == Basic NAT using IP Tables == | + | == Basic NAT example using IP Tables == |
In the example below the internal network 192.168.1.0/24 is Source Natted (SNAT) to the external IP Address 83.90.47.30. Source nat also makes port translations. So the example uses NAT/PAT, and would be sufficient as a NAT/PAT solution for a private network. | In the example below the internal network 192.168.1.0/24 is Source Natted (SNAT) to the external IP Address 83.90.47.30. Source nat also makes port translations. So the example uses NAT/PAT, and would be sufficient as a NAT/PAT solution for a private network. | ||
<pre> | <pre> | ||
| Line 22: | Line 22: | ||
target prot opt source destination | target prot opt source destination | ||
</pre> | </pre> | ||
| + | === Webserver located on internal network === | ||
| + | To redirect WEB traffic originating from the outside to a WEB-server on the inside you would use a rule as showed below. | ||
| + | <pre> | ||
[[Category:Linux]] | [[Category:Linux]] | ||
Revision as of 10:34, 7 March 2009
Linux IP Tables
IP Tables is used for packet filtering and NAT/PAT translation on several Linux distributions including
- Ubunto
- Redhat
- Centos
Basic NAT example using IP Tables
In the example below the internal network 192.168.1.0/24 is Source Natted (SNAT) to the external IP Address 83.90.47.30. Source nat also makes port translations. So the example uses NAT/PAT, and would be sufficient as a NAT/PAT solution for a private network.
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 0.0.0.0/0 -j SNAT --to 83.90.47.30
use the command iptables -L -t nat to see the rule in the IPTABLES chains.
[root@bkshost etc]# iptables -L -t nat Chain PREROUTING (policy ACCEPT) target prot opt source destination Chain POSTROUTING (policy ACCEPT) target prot opt source destination SNAT all -- 192.168.1.0/24 anywhere to:83.90.47.30 Chain OUTPUT (policy ACCEPT) target prot opt source destination
Webserver located on internal network
To redirect WEB traffic originating from the outside to a WEB-server on the inside you would use a rule as showed below.