Quote:
Originally Posted by Lazydog  Simple. use SNAT for packets leaving that this machine is sending to look as if it were 12.32 and packet targeted at 12.32 DNAT them to the ip address 192.168.x.x that you box has. This is the job of SNAT and DNAT and how they are to be used.. |
Eh, you are right...I am too used to using MASQUERADE with match state for multiple "internal" machines.
DNAT Code:
[root@real-server]# iptables -t nat -A PREROUTING -d 205.254.211.17 -j DNAT --to-destination 192.168.100.17
[root@real-server]# iptables -t nat -A POSTROUTING -s 192.168.100.17 -j SNAT --to-destination 205.254.211.17
Linear Mode
