network card & masquerading

mjhvg · 03-12-2009, 09:39 AM

Does masquerading really require two network cards? I am trying to set up dns tunneling, and I can not see for the life of my why the bogus dns server would necessitate two NICs.

Thanks

bhaslinux · 03-13-2009, 04:46 AM

Masquerading (mostly) is using in POSTROUTING chain when a packet just before going out of an interface
gets its contents changed. So I guess it is fairly ok to assume you need two network addresses for
MASQ to work (not necessarily two cards - a single network card with 2 network ip addresses will also suffice)

mjhvg · 03-13-2009, 04:59 AM

Well I am trying to set up dns tunneling, so I need the web page requests from the client to be resolved and returned by the proxy, and I think that there is something wrong with my iptables entry that isn't allowing this to happen. Do you know anything about this?

bhaslinux · 03-13-2009, 11:18 AM

why not use dns proxy ?
http://sourceforge.net/projects/dproxy/

mjhvg · 03-13-2009, 11:39 AM

I am already using editdns for a nameserver, I need to set up a "fake" name server, a proxy, so I don't think that dproxy is really what I need.