• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

linux equivalent to FreeBSD natd

Valhalla1

Diamond Member
I am used to using FreeBSD as my openvpn router operating system and using natd -redirect_address to map an external IP address to an internal one

I am now needing to setup the same thing on a debian linux box. I have the vpn working fine but I need to add public ip addresses to the server so I can nat some internal IPs to them

so what would the translation in linux be (I assume iptables?) for having something like this in my freebsd rc.conf :

natd_flags="-redirect_address 10.8.0.6 202.125.14.93"
 
Iptables is quite a bit more complex.. As in realy realy more complex.

If you want to setup a firewall router and your using Debian it may be worth your time to check out shorewall. Its' pretty kick-ass and it's aviable in Debian's repos.
http://www.shorewall.net/

I've been very happy with it.


Here is a simple one-to-many NAT firewall (aka Masquarade)
http://www.cs.cornell.edu/w8/~eckstrom/masq/

Otherwise you can google around for examples..
Just go
simple one-to-one NAT iptables

or whatnot. I can't find any one that will easily translate to here. Most of them are part of larger tutorials or overviews of netfilter/iptables. (It's kinda of a mess.)
 
well its not really a firewall as much as its a vpn server sitting behind a firewall.. it does however route vpn out to the internet and NAT to assign an external public IP address to vpn clients as they connect, so you could call it a router

also this is on a hosted virtual private server, so I can't change the operating system =/

indeed, looks like this is a much more complex task in linux than freebsd, where its a simple 1 line in conf file

maybe i should stick with bsd..
 
I know.

Linux is more difficult, but it's very capable.

You can do it with 2-3 lines, it's just that I am not sure which exact rules you'd want to use.

I'll have to look at it later and see if I can find something simple.
 
Back
Top