hi all,

I'm running centos6.3, which acts as gateway and firewall. I configured nat on it for remote desktops and jabber server to access from out side works perfect. Please help me get the nat working without enabling MASQUERADE.

thank you in advance.

You don't provide enough information to give you a detailed answer. Masquerade is a form of NAT: it automatically translates traffic from one range to another and handles the return traffic. For example, a common use of masquerade is in sharing your wired internet (default gateway) connection with wireless devices. You can configure your wired range to use for example, 192.168.x.x and your wireless to use 10.10.y.y. and set the wireless IP address as the gateway for wireless devices. The use of masquerade will then automatically translate addresses on the wireless 10. range to 192.168 addresses and vice versa.

When you say you want to use NAT without masquerade you need to develop rules to allow your traffic and the return traffic. If you are having problems with your NAT rules, I would suggest posting your rules along with a description of exactly what you're trying to accomplish.

Also, in case you haven't already, it is usually necessary to set ip forwarding to 1 in order to allow traffic to bridge the ranges.

Hi Noway2,

Thanks for your reply, sorry i couldn't give you more information. here are my rules, nat works for RDP,JABBER but at the same time MASQUERADE is enabled so that any user in the lan who is good enough to configure this firewall ip as his gateway and can use internet and do as he wish. In that case if i disable masquerade i'm unable to connect rdp from internet which means nat doen't work.

Please help me resolve the issue.

Thank you very much in advance.