non-masquerade routing (nfcan: addressed to exclusive sender for this address)

[Jim Laurino]

On 2006.02.04 10:22, Chris Baechle - bangular at gmail.com wrote:
> I'm trying to setup a linux router for routing of public addresses
> (non-nat / non-masquerade). I really don't know what this is called
> (so googling hasn't helped much).
>

Um, perhaps this is called 'routing'.

Once the route is set up,
and routing is turned on - something like:

echo 1 > /proc/sys/net/ipv4/ip_forward

all the *firewall* needs is permission to forward the packets
from one network/interface to the other.

> Example:
> 
> [Box A] ( 72.14.207.2)  <--->  (72.14.207.1) [Linux Router]
> (66.94.234.1)  <---> (66.94.234.2) [Box B]
> 
> Box A eth0 = 72.14.207.2
> Linux Router eth0 = 72.14.207.1
> Linux Router eth1 = 66.94.234.1
> Box B eth0 = 66.94.234.2
> 
> I want to be able to connect from [Box A] to [Box B] and Box B web
> server logs to show Box A's ip address (no natting); and if I do a
> traceroute have the linux router show up as a hop (no bridging).
> 
> So is this something for iptables or am I barking up the wrong tree? I
> checked out regular old route and iproute2 and didn't get much
> further. Any point in the right general direction would be greatly
> appreciated.
> 
> 
> 
>

-- 
Jim Laurino
nfcan.x.jimlaur at dfgh.net
Please reply to the list.
Only mail from the listserver reaches this address.