[MASQUERADING] [IP source pb]

Thibault Weintraub tweintraub@neomalogic.com
Thu, 31 Jan 2002 10:43:51 +0100


This is a multi-part message in MIME format.

------=_NextPart_000_0033_01C1AA44.2BB9A7D0
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

    Hello,


    I try to set up a local network through iptables 1.2.3 on a Kernel =
2.4.7-10 to provide Internet access on all local computers connected to =
a server which has two ethernet cards. One for the LAN and one for the =
ADSL modem.

    On the server, i have:

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               =
destination
    0     0 MASQUERADE  all  --  any    ppp0    anywhere             =
anywhere

    It works fine, everybody in the staff can browse Internet, send and =
receive mails BUT some site refused our connection since they detect =
that the IP source address is a local address such as 10.10.10.6 not the =
IP address sent by the modem.

    My question is, is there a way to change this behaviour ? Replacing =
local IP address from packets by ISP IP address ?

    Regards. T.W

------=_NextPart_000_0033_01C1AA44.2BB9A7D0
Content-Type: text/html;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252">
<META content=3D"MSHTML 5.50.4807.2300" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial>&nbsp;&nbsp;&nbsp; Hello,</FONT></DIV>
<DIV><FONT face=3DArial></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial>&nbsp;&nbsp;&nbsp; I try to set up a local =
network through=20
iptables 1.2.3 on a Kernel 2.4.7-10 to provide Internet access on all =
local=20
computers connected to a server which has two ethernet cards. One for =
the LAN=20
and one for the ADSL modem.</FONT></DIV>
<DIV><FONT face=3DArial></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial>&nbsp;&nbsp;&nbsp; On the server, i=20
have:</FONT></DIV><FONT face=3DArial>
<DIV><BR>Chain POSTROUTING (policy ACCEPT 0 packets, 0 =
bytes)<BR>&nbsp;pkts=20
bytes target&nbsp;&nbsp;&nbsp;&nbsp; prot opt in&nbsp;&nbsp;&nbsp;&nbsp; =

out&nbsp;&nbsp;&nbsp;&nbsp;=20
source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;=20
destination<BR>&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp; 0 =
MASQUERADE&nbsp;=20
all&nbsp; --&nbsp; any&nbsp;&nbsp;&nbsp; ppp0&nbsp;&nbsp;&nbsp;=20
anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;=20
anywhere<BR></DIV>
<DIV>&nbsp;&nbsp;&nbsp; It works fine, everybody in the staff can browse =

Internet, send and receive mails BUT some site refused our connection =
since they=20
detect that the IP source address is a local address such as 10.10.10.6 =
not the=20
IP address sent by the modem.</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;&nbsp;&nbsp; My question is, is there a way to change this =
behaviour=20
? Replacing local IP address from packets by ISP IP address ?</DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;&nbsp;&nbsp; Regards. T.W</DIV></FONT></BODY></HTML>

------=_NextPart_000_0033_01C1AA44.2BB9A7D0--