Linux Router- No NAT Rumi, May 7, 2018 I assume you have one public IP address for your WAN side, and a block for the LAN side, something like this: ISP-----ROUTER ETH0/ROUTER ETH1------SWITCH------PCs You NEED to have a public IP address for the WAN interface, ISP will route the subnet they have given you through this IP address. Simply you need to set the forwarding bit to 1 echo 1 > /proc/sys/net/ipv4/ip_forward To make it persistent you need to edit /etc/sysctl.conf, find this line: net.ipv4.ip_forward=0 and change it to net.ipv4.ip_forward=1 Make sure to uncomment it if commented. Now, all you need to do is set your pc’s default gateway to point to the linux router and assuming the ISP has done their work by routing the block through the public ip address for your lan side. Now. If all you have is a public address block… you’re not looking into routing, just hook the ISP to a switch and all the PCs to the switch and it should be done. If you can specify more details we might be able to help you more. With IPv6 You say your interfaces are configured as follows: wan: 2800:40:403::1/48 lan: 2800:40:403::3/48 What is your default gateway? I guess 2800:40:403::2/48 It shouldn’t really work like this. I haven’t worked with IPv6 yet but you have the two interfaces in one subnet, I guess I will allow you to configure that but say a Cisco router would at least warn you about the overlap Easiest solution is all the PCs go to a switch connected to the ISP. The real solution is tell the ISP to give you 1 public address on their address space for WAN and to route the block through that address. Then all you have to do is configure: wan: ip-from-their-space lan: 2800:40:403::1/48 And all the lan PCs should point to that one as default. You have a very large address space, what you could do is further subnet it. With Bridge Interface If you really want to bridge the interfaces you can do it without anything IP related. You will only have one interface with an IP address that way. All you need to do is install bridge-utils, then you configure it this way: ip add flush dev eth0 ip add flush dev eth1 brctl addbr br0 brctl addif br0 eth0 eth1 ip link set dev br0 up Then configure your IPv6 address on br0 instead and now you have a transparent bridge. It still doesn’t solve your IPv4 problem but you could solve it this way: Configure IPv4 public and private address on br0, and NAT this way: iptables -t nat -A POSTROUTING -j SNAT -s / --to-source Src: https://serverfault.com/questions/400395/linux-as-a-gateway-no-nat Related Administrations CentOSLinux Router
Increase mail attachment in Zimbra 8.8 June 3, 2018 Postfix configuration (zimbraMtaMaxMessageSize and message_size_limit) You can examine the current value of this parameter like this: # su – zimbra $ postconf message_size_limit message_size_limit = 10240000 This configuration parameter is stored in the zimbra ldap directory, and propagated to postconf’s message_size_limit by zmmtaconfig, which is invoked by the zimbra postfix… Read More
Publishing long domain key SPF TXT records in bind9 September 5, 2017 If your bind is throwing error with long TXT data, you can do the following means to concatenate: You are using commas to separate your key/value pairs in your record instead of semi-colons. Change it to: a9d04665528b593d263a6e5256648c99._domainkey IN 1800 TXT ( “k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/ZfhxSI/A” “bqgh0amM8ylrlosirWeKShUhq7fg12aYmRwOqq9hIzO0Fcz1BzfgHVu6HU++rC5” “QoUK0JQK/nk4jwkDgvG2di2ZYmAvEbY/VeiK1x/TG0p1Iczr2k6Bj0gEAb/YGD2” “YbwrwAi4bDXwoPsYuuNn9TB3jjyWKu/dvOsqhff1/4Wc+FkOi0ClvgrXiklN28X” “TLjyjSyU794ntIoegXxrfwcwkhfPMvuqcnhfIC0Z8L71M4WR4SoHyNHVfBtNlUv” “VNROiXlMxtxnNQvfViSwz6LC8bYIxeAba3hSXPTChKu3qZtfR0o3jFwEWAfLQdg” “Ixler0jMEoAyJmfQIDAQAB”) Related Read More
Installing NRPE For Icinga on Ubuntu 10.10 & CentOS 5.5 June 11, 2012June 11, 2012 I currently have Icigna 1.2 (classic, web, and mobile) running on Ubuntu 10.10. I have a few other Linux servers that I would like to monitor as well. There is a good amount of information on installing Nagios and things to accompany it but Icigna documentation and blogs are fewer…. Read More