NAT & Proxy?

muppski · 10-26-2005, 06:42 AM

Hey there!

Here is the situation

Comp A is connected to a proxy (windows ISA) and we use ntlmaps to be able to connect to the internet.
There is 2 NIC's in this comp , Eth0 is used to connect to the internet

Can we setup eth1 on Comp A so Comp B,C,D can surf trough it ? so we dont have to install ntlmaps on these?

fouldsy · 10-27-2005, 03:56 AM

Sure, you'd simply create a couple of iptable rules for handling and NAT and masquerading. Assign your second NIC an IP address and create your routing table so the system knows it has to use the first NIC when accessing the Internet, then simply point any other computer to the IP address of the second NIC.

Out of interest, why don't you just get rid of the ISA server - why run through two proxies with only a handful of machines?

muppski · 10-27-2005, 11:05 AM

So basicly it shouldnt be different with setting up nat whenever the comp handling the nat is going through a proxy or not?

ISA server? me? baaaah , this isent my setup
its the schools..

and its just not a handfull , just a example cuz we plug in comps in the computerlab all the time. When you install linux (lets say debian) you have to get ntlmaps put in the students user and pass to be able to run apt-get.

fouldsy · 10-27-2005, 11:53 AM

Correct. If your machine handling NAT sits between the school's ISA server and the machines in your computer lab, you're machines shouldn't have problems logging in. I'm not sure whether you'll need something else setup on your Linux box to handle authentication to the Windows ISA server. Give it a go and see.

muppski · 10-27-2005, 02:14 PM

Quote:

Originally posted by fouldsy
Correct. If your machine handling NAT sits between the school's ISA server and the machines in your computer lab, you're machines shouldn't have problems logging in. I'm not sure whether you'll need something else setup on your Linux box to handle authentication to the Windows ISA server. Give it a go and see.

It didnt work , forgot to mention that in the last post >_>
Either the iptables was fucked or it just didnt work