Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #206228

Re: Only using masquerading on internet facing server

From Stefan Monnier <monnier@iro.umontreal.ca>
Newsgroups linux.debian.user
Subject Re: Only using masquerading on internet facing server
Date 2019-03-13 13:40 +0100
Message-ID <xBbkS-3ni-9@gated-at.bofh.it> (permalink)
References <xB6lc-i5-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


> Ip range on server a: 172.17.232.0/24
> IP range on server b: 192.168.3.0/24

That's very vague.
But I'll assume that your "server b" has an address 172.17.232.NN
on one network interface and 192.168.3.1 on another.

> If I enable MASQUERADING on server b everything works as expected but as
> soon as I disabled MASQUERADING on server b the hosts behind it don't
> have internet access for example.
> What do I need to do on server a to properly MASQUERADE server b?

My guess is that on "server a" you have not setup routing so as to send
all the 192.168.3.0/24 packets to "server b".

IOW on "server a" you need to do something like

    route add -net 192.168.3.0/24 gw 172.17.232.NN
    

-- Stefan

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Only using masquerading on internet facing server john doe <johndoe65534@mail.com> - 2019-03-13 08:20 +0100
  Re: Only using masquerading on internet facing server Stefan Monnier <monnier@iro.umontreal.ca> - 2019-03-13 13:40 +0100
    Re: Only using masquerading on internet facing server john doe <johndoe65534@mail.com> - 2019-03-14 09:30 +0100
      Re: Only using masquerading on internet facing server mick crane <mick.crane@gmail.com> - 2019-03-14 09:40 +0100
      Re: Only using masquerading on internet facing server Joe <joe@jretrading.com> - 2019-03-14 10:20 +0100
        Re: Only using masquerading on internet facing server Dan Purgert <dan@djph.net> - 2019-03-14 12:00 +0100
      Re: Only using masquerading on internet facing server Stefan Monnier <monnier@iro.umontreal.ca> - 2019-03-14 14:00 +0100
        Re: Only using masquerading on internet facing server john doe <johndoe65534@mail.com> - 2019-03-14 16:50 +0100
      Re: Only using masquerading on internet facing server rhkramer@gmail.com - 2019-03-14 14:30 +0100

csiph-web