How to use netfilter to do static IP mapping?

Jason Opperisano opie at
Fri Sep 24 08:57:37 CEST 2004

On Thu, 2004-09-23 at 23:24, Patrick Dung wrote:
> Dear All
> This is what I want:
> eth0 as internet (
> eth1 as dmz (
> dmz has a web ( and dns ( server
> with private IP.
> The netfilter fw will do the static IP (public to
> private) IP mapping.
> Avaliable public IP (example):
> (eth0), (for web), (for dns)
> Now I have these rules:
> iptables -t nat -A PREROUTING -i eth0 -d -p
> tcp --dport 80 -j DNAT --to
> iptables -t nat -A PREROUTING -i eth0 -d -p
> udp --dport 53 -j DNAT --to
> The problem is that there is no response from
> and
> Do I need other special setting (proxy arp?)

yup.  on netfilter machine:

  ip address add dev eth0
  ip address add dev eth0

 remember to use 10.1.1.[23] in your filter rules and not 1.1.1.[23].


Jason Opperisano <opie at>

More information about the netfilter mailing list