Squid proxy and real IPs

ivanatora · 07-19-2004, 09:33 AM

If I have one machine running squid and doing nat and net accounting, how can real IPs from the inner network be viewed from the outer network (Internet)?

zaphodiv · 07-19-2004, 10:20 AM

Depends what you mean by "view".

It is normal to use reserved-for-lan ip addresses behind a NAT, ie 192.168.x.x, 10.x.x.x or 172.16-32.x.x
Reserved-for-lan addresses can't be used across the internet.

Your NAT machine will only have one internet ip address. People elsewhere on the internet will have to use that ip address to contact you. You can configure port forwarding so for example incoming connections to port 80 on you internet ip are sent to port 80 on one of your lan machine that is running a webserver.

ivanatora · 07-19-2004, 01:08 PM

I don't mean that reserved IP's, and I'm not doing SNAT or DNAT.. I mean all that I'm doing with routes is prerouting and forwarding. I don't have the iptables rules right now. And I want these machines behind the gateway/proxy/firewall to be represented to the Internet with their addresses, not with the address of the gateway/proxy/firewall machine.