netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Rob Hutton <justlikeef@gmail.com>
To: netfilter@vger.kernel.org
Subject: dst NETMAP
Date: Mon, 22 May 2023 14:11:36 -0400	[thread overview]
Message-ID: <CAGWgwrPXvZ-eVbsYp-zi0thV4=vz=nfj0jQ-_oEZo3e8TdOzeA@mail.gmail.com> (raw)

I am trying to set up a NAT gateway between two businesses where one
initiates the connection outbound to the other, so therefore have dst
nat entries in the following form:

ip daddr 10.192.3.0/24 dnat ip to ip daddr map { 10.192.3.0/24 : 10.12.3.0/24 }

and masquerade is enabled on the external interface.

The netmap is translating the network portion correctly, but the host
portion is not being preserved and is simply being chosen as if from a
NAT pool.  So pinging 10.192.3.254 should be translated to 10.12.3.254
and instead it is translated to 10.12.3.64 (for example).  How do I
preserve the host portion during the NETMAP translation?

Thanks,
Rob

             reply	other threads:[~2023-05-22 18:11 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-05-22 18:11 Rob Hutton [this message]
2023-05-23  8:54 ` dst NETMAP Pablo Neira Ayuso

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='CAGWgwrPXvZ-eVbsYp-zi0thV4=vz=nfj0jQ-_oEZo3e8TdOzeA@mail.gmail.com' \
    --to=justlikeef@gmail.com \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).