Any iptables/netfilter document that does NOT talk about NAT?

Skaperen · 09-03-2012, 11:31 PM

Is there any iptables/netfilter document that does NOT talk about NAT? It seems almost everything I find is focused on NAT setups. And none seem to mention IPv6 anywhere. And the packet filtering document on netfilter.org, which seemed to be the only thing that didn't focus on NAT, starts out with examples that don't even work (seems to be out of date).

Ygrex · 09-04-2012, 08:41 PM

no way, even ip6tables mentions nat:

Code:

$ man ip6tables | grep -iw nat
       iptables -t nat -A PREROUTING -p tcp --dport 80 -m cpu --cpu 0 -j REDI‐
       iptables -t nat -A PREROUTING -p tcp --dport 80 -m cpu --cpu 1 -j REDI‐
              nat and mangle OUTPUT chains one cannot match on the bridge out‐

if you think nat is deprecated, take a look at nat64 at least

Skaperen · 09-06-2012, 09:20 PM

Quote:

Originally Posted by Ygrex

if you think nat is deprecated, take a look at nat64 at least

It's not about deprication of NAT. I'm just looking for a clean reference for things that just don't need NAT. I need to get back into this and NAT will not be involved. Everything I see seems to include NAT everywhere and no explanation about how to leave it out correctly.

Ygrex · 09-06-2012, 11:21 PM

ok, basic brute force protection using linux netfilter: http://archive.cert.uni-stuttgart.de.../msg00025.html
nothing about nat and applicable to ipv6

Skaperen · 09-07-2012, 06:29 PM

Quote:

Originally Posted by Ygrex

ok, basic brute force protection using linux netfilter: http://archive.cert.uni-stuttgart.de.../msg00025.html
nothing about nat and applicable to ipv6

I'm looking more for something like a mini-manual or reference guide. A tutorial might be OK. Examples are good. But this page seems to be focused on something dynamic for a particular case. I'm looking for a document where the author believes it covers a lot of simple case others might have.

I guess I should buy a book and cut the binding at the first 1/3. OTOH, that might be bad as some big documents I've seen went right into NAT stuff as soon as they explained what a network is.

Ygrex · 09-07-2012, 07:47 PM

well, seems like you are going to read lectures before auditory not necessarily familiar with NAT; let us know when you find something like that

from my experience in most cases NAT is configured if iptables were touched at all; the only except I remember I've mentioned above