setting up NAT using iptables...

[vasanth]

Ok here is my situation...


i have a linux server running Gentoo with two network interface cards connected to 2 different newtorks....


lets say that the two cards have the ip... 132.0.0.1 and 93.0.0.1 and i have a machine each on the two networks with say ip. 93.0.0.2 and 132.0.0.2 ..


now 93.0.0.2 is running a server application on port 2000. I need the machine 132.0.0.2 to access this service trhough the linux machine......


Its fine if the server thinks that the client is the linux machine and the client thinks that the linux machine is the server.... I need the linux machine to do some kind of reverse NAT... Some one told me that i oculd do this through iptables but I am quite new to linux and have no idea how to do this.. can some one show me how i can configure iptables to do this..(with commands please..)..


and its TCP packets which needs to be fowarded and I have root permission on the linux machine... and I cant change the network configuration...

thanx in advance

[CornedBee]

I don't quite see the problem, unless you have the system set up to disallow generic routing.

Ok, just a few abbreviations. loc1 is the 132.* network, loc2 the 93.*. rout is the server that connects both, serv is 132.0.0.2 and clie is 93.0.0.2.

Basically, if you do a
telnet serv 2000
on clie, it should contact successfully, and the default routing function of rout should take care of everything.

Ok, what if clie is not aware of loc1...
Basically, this rule (shorewall format, shouldn't be too hard to translate to an iptable call) should automatically route all requests to rout's port 2000 to serv:
action from to protocol port
DNAT loc2 loc1:132.0.02 tcp 2000

If that doesn't solve your problem, I need a better description.

[vasanth]

ok they are two complete different networks with independent DHCP servers.... now the linux machine i am sepaking about has access to both these networks through the 2 NIC cards it has..... but other than this the 2 networks have no link.... so i want to use this machine as a bridge or something which will allow me to communicate between the two networks.. (actually just need to access a server on the other network)...

[CornedBee]

Can't you tell both DHCP servers to tell the machines to use the linux machine as gateway? Then have the linux machine use whatever computer connects to the internet as gateway.

Are they both non-routable networks? (192.168.* and another block)

[vasanth]

well i can do anything with the DHCP server and stuff. One network has around 200 PC's (not connected to any outside network for security reasons) and the other network has around 800 PC's....... so reconfiguring anything other than the linux box is not in my hands..

[CornedBee]

Then you'll need someone more knowledgable than me.

[vasanth]

thanx anyway... solved it.. just had to set up some iptables rules to enable port fowarding.. works now..