Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [masquerade]

77 questions
0
votes
1 answer

SNAT does not work to keep real client IP, MASQUERADE works

I have 3 hosts: AAA, BBB, CCC. Host AAA is an OpenVPN server with IP 172.17.10.1 and mask 255.255.255.0. Host BBB has 2 tun interfaces: • an OpenVPN server with IP 172.16.10.1 and mask 255.255.255.0 • an OpenVPN client with IP 172.17.10.50…
inivanoff1
  • 113
  • 4
0
votes
0 answers

How to create access point or virtual access point in Fedora server 37 to access localhost too

Hi I am trying to create an access point in ideal case virtual access point in Fedora server 37. I can create a simple AP for wifi to LAN(wlp7s0 -> enp1s0 in my case) using these commands and I can connect to this and also have internet access on…
Openstack
  • 1
0
votes
1 answer

Wireguard tunnel without masquerade

Here is a network topology The wireguard connection is initiated by the local server, calling the vps through its public IP. Their config files looks like this: VPS [Interface] Address = 10.0.0.1/24 ListenPort = 51820 PrivateKey =…
RooSoft
  • 236
  • 2
  • 10
0
votes
0 answers

Sendmail 8.15 is not rewriting sender domain

Sendmail 8.15 on a RHEL 8 system. I am able to send mail out, but when I receive it on the other end, the 'from' address is user@FQDN instead of user@MASQUARADE_AS what we get: user@realhosname.realdomain.com what we want:…
Chisel Ouidolam
  • 21
  • 2
0
votes
0 answers

Sendmail does not masquerade the hostname.domain combination

My MASQUERADE settings looks as follows... dnl # Also accept email sent to "localhost.localdomain" as local email. dnl # LOCAL_DOMAIN(`localhost.localdomain')dnl dnl # dnl # The following example makes mail from this host and any additional dnl #…
Mike
  • 1
  • 1
0
votes
0 answers

UDP Broadcast not being masqueraded

I have a VM in Proxmox with an IP (192.168.1.10) coming from a bridge. I have masquerading on to enable it to communicate with my network: -A POSTROUTING -s 192.168.1.0/24 -o host_inteface -j MASQUERADE It works great except with this kind of…
Catfoxes
  • 1
0
votes
2 answers

Masquerade / firewalld target : impacts on filtering?

I opened a question here, but as I found some new elements, I prefer to open a new one. Here is my situation, that can be reproduced: Fresh Centos7 OS. Configuration of two interfaces eth1 and eth2 with ip adresses X and Y -----------------> @X…
Carbon69
  • 11
  • 2
0
votes
3 answers

why MASQUERADE SNAT can block localhost connection?

I observed a weird behaviour on linux: First, I clean all routes and iptables rules: ip route flush table main ip route flush table default ip route flush table local iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT…
sebastien dontneedtoknowthat
  • 103
  • 4
0
votes
1 answer

PortForwarding eth0 to ppp0

I have a RaspberryPi which connects to the internet on eth0 which has static IP, I have installed Squid and I have also enabled 1694 port on my Mikrotik router to be forwarded to 3128 port on my raspberry, so I can use my raspberry as a proxy…
Reza_Rg
  • 103
  • 4
0
votes
1 answer

Mikrotik - NAT over 2 ports - cant get it to work

I have a problem with setting up NAT over two ports in separate LANs (there is no internet involved in this). Situation description: Problem is that our PBX. It has some crazy network setup with loops and when directly connected to our internal…
TBS
  • 21
  • 2
0
votes
2 answers

Using nftables to forward HTTP(s) traffic to VM guest without masquerade

I am currently in the process of setting secure as possible KVM based server. The VM host should be more or less invisible to the internet and only VM guests running single services should be exposed. VM guests should have no internet access (--> no…
Kound
  • 118
  • 3
0
votes
1 answer

Can't get linux router/iptables masquerade working

Hope someone more clever than me could help because I am out of ideas... We want to create (in openstack) a router that will...route (haha) trafic from one network to the other. Simple. This is what I have done so far. I have read a lot of post and…
Romain Pelissier
  • 1
  • 1
0
votes
1 answer

Is there a way to limit Src Ports in IPtables masquerading

I have the following chain setup by kube-proxy in my iptables on all my Nodes. Chain KUBE-POSTROUTING (1 references) target prot opt source destination MASQUERADE all -- 0.0.0.0/0 0.0.0.0/0 /* kubernetes…
schmichri
  • 387
  • 2
  • 10
-1
votes
1 answer

firewalld masquerade control

for various reasons I have had to adopt CentOS 7 as a public facing firewall machine implementing NAT and a few other bits and pieces. Seems easy enough. My basic strategy is to assign the outside interface to the "Drop" zone for max security and…
ValidUserName
  • 1
  • 1
-1
votes
2 answers

How to Access a host behind a server over VPN (IP Forwarding)

I have a Ubuntu server (172.10.200.11) and many remote terminal units with simcards and each individual simcard operator using different IP pool such as 10.57.0.0/16 for OP-A, 10.112.0.0/16 for OP-B, etc. In the server actually i am using a routing…
crackerboy
  • 1
  • 1
  • 2
1 2 3 4
5
6