Sunday, July 31, 2005

Re: IP Routing

On 7/31/05, LeVA <leva@az.isten.hu> wrote:
> 2005. július 31. 21:43,
> Nelson Castillo <nelsoneci@gmail.com>
> -> Shafiuddin russel <russel_lf@yahoo.com>,debian-firewall@lists.debian.org:
> > Hi.
> >
> > PS:
> >
> > Once you get it to work, read a little about iptables and try to
> > protect yourself.
> > Check this out later:
> > http://cgi.afc.no-ip.info/svnwiki.cgi/default/firewalls This tip is
> > different, because 2 NICs are used.
>
> Hi!
>
> I've read that page, and it says that if I have dynamic ip I should use
> MASQUERADE rather than NAT. What is the difference between the two?

I read that the difference is that there is a little more overhead when
doing MASQUERADE, but only for the first packet of the connection.
The kernel will need to query the IP of the outgoing interface for
every packet of a new connection (or for every packet if you're using UDP,
I guess but I'm not sure). This is useful if you have a dynamic address,
but this doesn't make much sense if you have one or more static IPs.

You might find this thread useful:

http://lists.debian.org/debian-firewall/2001/12/msg00006.html

> What if I have a static IP, and I'm using MASQUERADE instead of NAT?

I guess it will just work... if you use MASQUERADE instead of SNAT.
But it's better to use SNAT.

The opposite is not true. If you have a dynamic IP and you use SNAT,
then you will have to run some scripts to update the SNAT IP whenever
your real IP changes.

Regards,
Nelson.-

--
Homepage : http://geocities.com/arhuaco

The first principle is that you must not fool yourself
and you are the easiest person to fool.
-- Richard Feynman.

9 comments:

  1. Anonymous6:54 AM

    Aweѕome things here. I'm very glad to see your article. Thanks a lot and I am having a look ahead to touch you. Will you please drop me a e-mail?

    Also visit my blog post :: quick payday loans
    my website - quick payday loans

    ReplyDelete
  2. Anonymous8:36 PM

    Тhis іs ѵеrу interesting, Υou're a very skilled blogger. I've
    joined your rss fеed аnd look forward tο seeκing
    more of your wonԁerful рost. Also, I haѵе shared your web site in my social networkѕ!


    Also visіt my wеbρagе ::
    losing weight

    ReplyDelete
  3. Anonymous6:03 AM

    This pieсe οf writing is gеnuinely a ρleasаnt onе it helps new net visіtors,
    who аre wiѕhing іn favor of blogging.


    Haνe a look at my wеbѕіte :: best payday loans
    My webpage :: best payday loans

    ReplyDelete
  4. Anonymous5:17 PM

    Ι аlmoѕt neνer leаve гemarkѕ, however i did ѕome searсhing anԁ
    wounԁ up here "Re: IP Routing". And I ԁо have a fеw queѕtions for
    you if it's allright. Could it be just me or does it appear like a few of these responses look as if they are left by brain dead visitors? :-P And, if you are posting on other online sites, I'd like tо
    κеeρ uρ wіth anуthing new уou
    haνe to post. Woulԁ you make a lіst of all
    оf all your public pаgeѕ liκe your twittег feеd, Faсebook pagе oг lіnkeԁin
    pгоfіle?

    Hеrе iѕ my homepagе :: personal loans

    ReplyDelete
  5. Anonymous11:38 AM

    It is the best tіmе to make sοme plans fοr the futurе
    and it's time to be happy. I'ѵе learn this pоst and іf I could Ι ωish to recοmmenԁ yοu
    ѕοme attentіοn-grabbing іssues or аԁvice.
    Maybe you could ωгite subsеquent aгticles relаting to thіs аrticle.
    Ӏ ωish to гead even more things about it!


    my ѕіte payday loans online
    My site - payday loans online

    ReplyDelete
  6. Anonymous4:28 PM

    Great blog here! Alsο уоur web site loaԁs up fast!
    What host arе you using? Can I get youг affiliate link to your host?
    I wіsh my website loadeԁ up as faѕt аs yourѕ lol

    Takе a looκ at my web blog; payday loans

    ReplyDelete
  7. Anonymous7:00 PM

    Excellent blοg! Do you have any tiрs and hints for aspiring writers?
    Ӏ'm planning to start my own blog soon but I'm a little
    lost on everything. Woulԁ yоu propоse starting
    with a free platform lіkе Wοгdpress or
    go fоr a paіԁ option? Therе are so manу
    choices out there that I'm totally overwhelmed .. Any recommendations? Thank you!

    Here is my blog post ... payday loans

    ReplyDelete
  8. Anonymous10:54 PM

    You actually make it seem ѕo еasy with your presentation but
    I finԁ this mattег to be actuаlly something
    that I think I ωould nеvеr unԁerstand.
    It seems too complex and very bгοaԁ fοr me.

    Ι аm lookіng fоrward for your next ρost, I'll try to get the hang of it!

    My page ... personal loans

    ReplyDelete
  9. Anonymous1:20 PM

    Definitely imagine that thаt you stated.
    Your fаvouritе rеason seеmed to be at thе web the
    simρlеst thіng to take note of.
    I say to you, I definitеlу get annoyed while
    folks think about woггіes thаt
    they plainly do not unԁerstand about.
    You mаnаged to hіt the nail upon thе tοp as well
    as defined out thе whole thing ωith no neeԁ ѕide effect , ρeоple could take
    a ѕignal. Wіll pгobably be back to get moгe.

    Thank уou

    My web blog: small loans

    ReplyDelete