Re: IP Masquerading: Can the source address be set somehow?

Christoph Lameter (christoph@lameter.com)
Thu, 12 Mar 1998 07:05:28 -0800 (PST)


Works great! Thanks.

On Wed, 11 Mar 1998, Jon Lewis wrote:

> On Wed, 11 Mar 1998, Christoph Lameter wrote:
>
> > I run a Linux Router/Firewall (One T1/Frame Relay, 2x 100BT, 2x 10 BT)
> > for our Campus (very much superior to any commercial router I have seen
> > <G>, especially since you can run a Webcache and DNS cache on the
> > firewall).
> > Anyways the T1 interface has an IP (38.x.x.x) assigned by our ISP which is
> > not part of our Class C Networks. I do masquerading on the Router and the
> > router masquerades connections as coming from the Frame Relay Interface
> > 38.x.x.x. Some Companies do authentication by reverse lookup of the
> > orignating IP and this will fail. I was able to reconfigure the webcache -
> >
> > How can I fix the kernel masquerading to not use 38.x.x.x as the source
> > address for masquerading but instead another IP address on the
> > router that is part of our Class C networks?
>
> If you can setup ip aliasing on the Frame interface, an alias address from
> inside your address space. Then set your default route to go through the
> alias device. I've done this with eth0 to make my packets look like they
> came from a different address on some occasions.
>
> ------------------------------------------------------------------
> Jon Lewis <jlewis@fdt.net> | Unsolicited commercial e-mail will
> Network Administrator | be proof-read for $199/message.
> Florida Digital Turnpike |
> ______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____
>
>
>

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu