IMQ a NAT

[Libor Chocholaty]

Libor Chocholaty wrote:
> Ahoj,
>
> mam zajimavou potiz s shapovanim. Mam router, ktery na jednom rozhrani 
> ma pripoj do internetu a na ostatnich ruzne segmenty lokalni site. 
> Dela se NAT (maskarada) a pro vybrane IP na vnitrni siti delam NAT 
> 1:1, takze maji jakoby verejnou adresu.
>
> # iptables -t nat -L -v
> Chain PREROUTING (policy ACCEPT 103M packets, 7318M bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>  929 70723 DNAT       all  --  eth0   any     anywhere             
> marvin_verejna      to:marvin_lokal
>
> Chain POSTROUTING (policy ACCEPT 60M packets, 4901M bytes)
> pkts bytes target     prot opt in     out     source               
> destination
>  166 12616 SNAT       all  --  any    eth0    wlink-heaven-marvin  
> anywhere            to:marvin_verejna
> 108K 9060K SNAT       all  --  any    eth0    olink-heaven-marvin  
> anywhere            to:marvin_verejna
>  77M 5620M MASQUERADE  all  --  any    eth0    anywhere             
> anywhere
>
> pozn: linka na marvina je zalohovana (optika + wifi zaloha) - proto 
> jsou pro SNAT dve pravidla
marvin_lokal je adresa pro dummy interfejs, skutecne sitove interfejsy 
maji wlink-heaven-marvin (wifi) a olink-heaven-marvin (optika).