Multiple Source IP Addresses

[Baake, Matthias]

If i understood it the right way you want to map an internal machine (e.g. Webserver) to an external address.
Then you have to make a Rule into NAT Prerouting to redirect specific Traffic to the internal machine.

IPTABLES -t nat -A PREROUTING -i $EXT_IF -d $Your_ext_ip -j DNAT --to-destination $IP_OF_YOUR_INTERNAL_WEBSERVER

The filtering for this map you can still do in the filter table. Like your rule you already posted.
This way your Internal Webserver should be reachable from the Internet.

/matthias baake



-----Original Message-----
From: netfilter-bounces at lists.netfilter.org
[mailto:netfilter-bounces at lists.netfilter.org]On Behalf Of Dennis O.
Aliev
Sent: Friday, March 11, 2005 4:50 AM
To: netfilter at lists.netfilter.org
Cc: sergey at etecom.com; daliev at etecom.com
Subject: Multiple Source IP Addresses


Good evening,

Is there a way to send traffic from host behind IPTables firewall using different external source IP addresses that are assigned to firewall on the external interface?

Host behind firewall has single IP address (192.168.1.94)  and making  http based requests to internet.

Firewall has following rules to make it work:
iptables -t filter -A forward -o eth0 -p tcp -s 192.168.1.94 --dport 80 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth0 -s 192.168.1.94 -j SNAT --to-source some_external_ip

I was thinking of making http request from host to a different port and then based on that change source address to another external address and change the destination port to 80, but can't figure out how to do that.

Does anyone have any ideas? Perhaps there is a different approach?
-- 

Dennis O. Aliev