Re: How to add a SNAT rule with firewalld and firewall-cmd

2025-01-07 Thread Dario Lesca
Il giorno lun, 06/01/2025 alle 21.50 -0800, Samuel Sieb ha scritto: > firewall-cmd --permanent --direct --add-rule ipv4 nat POSTROUTING 0 - > d 172.17.0.0/16 -p all -j SNAT --to 5.6.7.8 > > Where 5.6.7.8 is the interface IP address you want to use. Thanks, it work also for me. &g

Re: How to add a SNAT rule with firewalld and firewall-cmd

2025-01-06 Thread Samuel Sieb
On 1/6/25 11:11 AM, Dario Lesca wrote: I can't use MASQUERADE because I must go out with a specific additional external IP, then I must use a SNAT rule in the place of MASQUERADE Do as indicated in the object with nft found here: https://docs.redhat.com/en/document

How to add a SNAT rule with firewalld and firewall-cmd

2025-01-06 Thread Dario Lesca
I can't use MASQUERADE because I must go out with a specific additional external IP, then I must use a SNAT rule in the place of MASQUERADE Do as indicated in the object with nft found here: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/7/html/security_guid

Re: SNAT

2010-01-10 Thread Mail Lists
On 01/10/2010 09:34 AM, David Hláčik wrote: I am very confused by: a) My "router" has 1 interface eth0 - so err.. you're trying to run 2 networks on same eth0 ? b) The DSL modem is not natting - yet its IP on LAN side is RFC 1981 I'd suggest clearly laying out your network - perhaps o

Re: SNAT

2010-01-10 Thread David Hláčik
outer. > > Now i want to configure NATTING. My concern is, how to create iptables > rule which will match only the traffic going via 10.123.10.11 and only > for this will make SNAT. > If I will do iptables -A POSTROUTING -o eth0 --j SNAT --to-source > 213.194.242.198 this will not wo

SNAT

2010-01-10 Thread David Hláčik
w to create iptables rule which will match only the traffic going via 10.123.10.11 and only for this will make SNAT. If I will do iptables -A POSTROUTING -o eth0 --j SNAT --to-source 213.194.242.198 this will not work . I need to add there a magic words that only traffic going via 10.123.10.11 should