MASQ without forwarding?

Mark Carey capt_marko_ramius@hotmail.com
Thu, 31 Jan 2002 20:21:45 +0000


Hi,
I am running MASQUERADING for my local class C subnet using a Linux box, 
with the following command;
$IPT -t nat -A POSTROUTING -o ppp+ --source $MY_NET -destination $ANYWHERE 
-j MASQUERADE

However I want to run MASQUERADING without having to have ip_forwarding 
enabled.  Is there a simple way to do this?
I have tried changing the above rule to;
$IPT -t nat -A PREROUTING -i eth0 --source $MY_NET --destination ! 
$FW_BOX,$MY_NET -j MASQUERADE
However this does not work.

I also note that the first rule above, requires the machines being MASQ'ED 
to have the ability to send a recieve traffic through the FORWARD table.  
Why is this so?  Does IPTables start the new connection via the MASQUERADE 
rule with all subsequent data travelling through the FORWARD rule?

If this is all covered in a tutorial somewhere please point me in that 
direction, I have been unsucessful in locating it thus far.

Thank You,

Mark Carey

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com