NAT + public IPS (+ firestarter)

Stefan Pantiru · 05-13-2005, 04:31 AM

I know there are some other posts like this, but I couldn't really find a solution... so here I am asking again...

Using Fedora Core 3...

I have my linux box (2 nics) sharing my Internet connection to my LAN. I used Firestarter to do that easely.

All ok....

But now, I've got public IP's for every computer in my LAN (round 15 PCs). So what do I have to do to have public ips asigned to my lan PCs?

suppose my public ip is 1.1.1.1

I tried something like this:

Code:

iptables -t nat -A PREROUTING -d 1.1.1.1 -j DNAT --to-destination 192.168.3.21

and

Code:

iptables -t nat -A POSTROUTING -s 192.168.3.21 -j SNAT --to-source 1.1.1.1

to asign the public ip 82.77.230.225 to my local IP 192.168.3.21, but it's not really working... I cannot ping 1.1.1.1 from Internet... and a site like "what's my ip" will only see my router's ip not the nat-ed ones...

i believe firestarter has nothing to do with this...

any ideas how this job SHOULD be done?

I tried adding this:

thanks

Code:

route add -net 1.1.1.0 netmask 255.255.255.224 dev eth1

eth1 being the nic connected to the ISP
still no succes...

jkmartha · 05-14-2005, 01:24 AM

hi Stefan Pantiru,
i could not get what exactly u want to do ???
suppose u have 15 internal PCs with public IPs, u need not configure NAT bcoz all r public IPs. simple configure each host with its ip & SPECIFY the route & DNS on each host. thats it. if i am n't wrong.

Stefan Pantiru · 05-17-2005, 05:43 AM

I tried that... i couldn't make it work, maybe the fact that there was the same netmask on my both nics then... i don't know...
Anyway, I abandoned the idea... it would have bine nice to have a clear solution about how could this sort of "mapping" could be done, though...

thx for the answer, jkmartha!