iptables twice nating
Hi,
I would really appreciate some advice on the following. Note that ive had a look at lots of tutorials but when it comes to twin-nating none seem to work for my particular case.
Imagine if you will the following situation
Public address Space
xxxx.xxxx.xxxx.xxxx yyyy.yyyy.yyyy.yyyy
ppp0 ppp0
[network device] [linux border router]
eth1: 172.16.0.4 eth1: 172.16.0.5
DMZ Address space
eth1: 172.16.0.51
[linux dmz / internal router]
eth:0 192.168.1.100
Internal address space
The default route on the on the [linux dmz / internal router] is 172.16.0.4.
In the event that the [network device] fails it would be nice to have traffic come over the [linux border router] without having to make change the default route upon the [linux / internal router].
Is it possible to nat mail for example at the [linux border router] so that the [linux dmz / router] routes packets back through 172.16.0.5 instead of trying to use the default route ?
Here is what Ive tried to no avail upon the [linux border router]
iptables -t nat -A PREROUTING -d yyyy.yyyy.yyyy.yyyy -i ppp0 -p tcp -m tcp --dport 25 -j DNAT --to-destination 172.16.0.51:25
iptables -t nat -A POSTROUTING -s 172.16.0.51/32 -j SNAT -o eth1 --to-source yyyy.yyyy.yyyy.yyyy
iptables -A FORWARD -p tcp -i ppp0 -o eth1 -d 172.16.0.51 -m multiport --dport 25 --sport 1024:65535 -m state --state NEW -j ACCEPT
Any ideas corrections etc would be greatly appreciated
|