jesseg at nikola.com
Wed Nov 23 02:46:36 CET 2005
----- Original Message -----
From: "Nikolai Georgiev" <voyager123bg at gmail.com>
To: "Jesse Gordon" <jesseg at nikola.com>
Cc: <netfilter at lists.netfilter.org>
Sent: Tuesday, November 22, 2005 4:46 PM
Subject: Re: Unmatchable packet?
> Jesse Gordon wrote:
>> ----- Original Message ----- From: "Jesse Gordon" <jesseg at nikola.com>
>>> My box is running a TCP service. When another box tries to my box, my
>>> Should I expect such a feat to be possible?
> I think you are looking for DNAT. Yep, you want to make DNAT. Lets
> suppose you have 3 machines: A,B,C; A is behind B and you are on C. You
> would want to make a DNAT rule on B to A in order to initiate
> connections from C to A...
Thanks for your response!
You are correct as to how I would go about forwarding ports to publish an
internal server -- but forwarding ports isn't my goal.
Incidently I didn't explain well I guess.
Note that what I'm trying to describe is not a normal thing to do; It's not
something that will make sense. Once you understand what I'm trying to say,
you'll want to ask me "But why on earth would you even want to do that?" (My
goal does have a use in the real world, but the real world is a much more
complicated scenerio to set up.)
I actually want to rewrite the source IP of TCP packets that exit a given
ethernet card -- even (especially) if they are generated as responses to
incoming connections to the box.
Lets say I have 2 machines: S, and C;
S is the server, and I am on C[lient]. Both machines are sitting on a simple
isolated flat LAN.
Normally, when C connects to S, S replies with it's own source address. This
is normal operation, and is what I want to alter.
I wish for the replies from S to be to reach C with an arbitrarly assigned
(And I want the source address rewrite to be performed inside S)
I hope I was more concise this time.
More information about the netfilter