Mornin' again,
Right, I have a ppp connection to a server running on a network. In
order for that network to be able to route back across the ppp
connection, i'd need to either modify the routing in the network (not a
hope), or set up some kind of masquerading. The iptables docs claim that
if you have a fixed ip for a client, you shouldn't use MASQUERADE, but
use SNAT instead. However, SNAT requires a --to-source parameter, in
which you specify where you want the packets to appear to be coming
from, to the network. The docs don't say (or at least not that i can
see) what the consequences are of using this parameter. I'm guessing
that i should set it to be the ip address of the ppp server, is that
correct?
Steve, still trying to get to grips with iptables.
--
"The Catholic Church may wish to consider conducting Mass in Pig Latin,
as it combines the solemnity of Latin with the accessibility of English."
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!