/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ Chris, did you receive any off-line answers to this? This is becoming a hot topic for a few people, me included. I really want to know a way to send outbound packets stamped as coming from a PARTICULAR Ip address (ie one of my masq/portfw addys) rather than the IP address of the "real" external interface. So far, it looks like the solution is to go to iproute2, but that just seems kind of kludgy to me. I mean, cheap firewalls (like a cisco PIX) have been doing this for years -- have they always been doing source routing? It just seems like there has to be an easier way to implement this.... Any ideas guys? Doug Apel Sr. Network Administrator Omnipoint Technologies, Inc. [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, December 06, 1999 3:51 AM To: [EMAIL PROTECTED] Subject: [Masq] binding particular IP addr to masq'd packets /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */ INTERNET ------- Router A | 192.168.0.0/30 | Linux masq/router | | | | | | 172.16.0.0/12 | | | | 216.174.15.192/26 | | 216.174.14.192/26 Here's my problem. I've got two public IP subnets that need to be routed through the Linux masq/router to Router A and router A handles everything from there. Also, Router A routes packets from the 172.16.0.0/12 subnet to about 5 other subnets, one of which is a private subnet. That's all fine and dandy. The only problem is that, when the Linux box masquerades packets that are destined for someplace outside of my IP space, it will translate all IP addresses to 192.168.0.2, which is the address of the ethernet card which connects to Router A. Router A receives these packets on 192.168.0.1 and deals with them then. Obviously, nothing can be routed on the Internet with an IP from the 192.168.0.0/16 network, so this isn't going to work. Does anyone know how to make the Linux masq/router translate packet IP addrs to a particular address, and THEN route them? thanks in advance -chris davis [EMAIL PROTECTED] _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list. _______________________________________________ Masq maillist - [EMAIL PROTECTED] Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING! or email to [EMAIL PROTECTED] PLEASE read the HOWTO and search the archives before posting. You can start your search at http://www.indyramp.com/masq/ Please keep general linux/unix/pc/internet questions off the list.
