[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Iptable NAT problem - DONE!



Hi Mike

On Wed, 2004-08-11 at 00:10, Mike Mestnik wrote:
> You need to "ifconfig eth0:1 up 203.94.71.36", this will cause arp replys
> to be sent and the IP(protocol) stack to accept data for that IP.  Then
> your "iptables -i eth0:1 -j DNAT" cmds will work nicely, without any SNATS
> as it's assumed that replys will need to come from 203.94.71.36.

It worked! Thanks!

Is there a security issue with this method?
My senior partner says it's not a good method to do this (but he is run
out of an idea ;-)) Is it true?
Do you have any documentation regarding this (security issue of this
method)?

Thanks!

Pradeeper



Reply to: