multiple mapping

John A. Sullivan III jsullivan at
Wed Sep 1 13:33:08 CEST 2004

On Wed, 2004-09-01 at 07:19, Tomek Macioszek wrote:
> Thanks for help. I have just only one question?
> If I make multiple mapping like this:
> iptables -t nat -A POSTROUTING -s -o eth0 -j SNAT --to
> I should bind all this addresses ( to eth0?
> ip address add dev eth0
> ip address add dev eth0
> ip address add dev eth0
> ....
> ip address add dev eth0
> Best regards
> T.
If that is what you want to do, you will probably want to use the NETMAP
target from patch-o-matic.  The rule that you propose does not guarantee
a one-to-one mapping.  It does a round-robin mapping.  Thus there is no
guarantee that maps to In fact, it most likely
will not.

As far as I know, you will need to bind all of the addresses so that
they respond to the ARP requests.

This is where a tool like ISCS comes in handy
(  Not only does it automate the access
control configuration but it automates NAT and ARP.  You would simply
create a server with a private IP address of
and a public address of and check the enforce
one-to-one box.  It would then create all the NAT rules, the address
bindings for ARP and distribute them to the gateway.  The project only
has pre-alpha releases thus far but we are moving quickly toward a full
release.  Good luck - John
John A. Sullivan III
Open Source Development Corporation
Financially sustainable open source development

More information about the netfilter mailing list