> I run a Linux Router/Firewall (One T1/Frame Relay, 2x 100BT, 2x 10 BT)
> for our Campus (very much superior to any commercial router I have seen
> <G>, especially since you can run a Webcache and DNS cache on the
> firewall).
> Anyways the T1 interface has an IP (38.x.x.x) assigned by our ISP which is
> not part of our Class C Networks. I do masquerading on the Router and the
> router masquerades connections as coming from the Frame Relay Interface
> 38.x.x.x. Some Companies do authentication by reverse lookup of the
> orignating IP and this will fail. I was able to reconfigure the webcache -
>
> How can I fix the kernel masquerading to not use 38.x.x.x as the source
> address for masquerading but instead another IP address on the
> router that is part of our Class C networks?
If you can setup ip aliasing on the Frame interface, an alias address from
inside your address space. Then set your default route to go through the
alias device. I've done this with eth0 to make my packets look like they
came from a different address on some occasions.
------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Unsolicited commercial e-mail will
Network Administrator | be proof-read for $199/message.
Florida Digital Turnpike |
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu