Questions tagged as ['dnat']

Assuming the following:

||netns2|<-kernel routing-> netnsRoot| <-network routing-> |remote server| 

netns2

• is a network namespace
• has a client that connects to the UDP server on UDP/5060

netnsRoot

• is the root network namespace (IE: typical linux routing)
• has a client that connects to the UDP server on UDP/5060
• Has ip_forward enabled and has a Masquerade rule for netns2

Server

• Onl ...

I have a server in a datacenter which is a Proxmox server. On the server (one of many, they are in a Proxmox cluster) I am hosting various VM's.

Services on the VM's are exposed through iptables (using ufw) natting like the following example:

-A PREROUTING -i eno1 -p tcp -d <public_ip> --dport 21 -j DNAT --to-destination <local_ip>:<port>
-A PREROUTING -i eno1 -p tcp -d <public_ip ...

I have a server on AWS with a floating (secondary) IP. During integrations with a partner I provide my secondary IP to be whitelisted and define a POSTROUTING rule to SNAT my IP to the secondary IP to reach to destination such as

sudo iptables -t nat -A POSTROUTING -d partnersip/32 -s myprivateip -j SNAT --to-source secondaryip 

But now I've come to a scenario where my partner is also using NAT and I ...

I'm setting up TPROXY on my VyOS router to forward certain traffic to a local transparent proxy. It works pretty well, until I discovered that all of my DNAT port forwarding rules are no longer working (connection timeout when connecting from external network).

Environment

• Router: 10.0.0.1/24 (Proxy is running on 1234 port and adding SO_MARK with 0xff)
• Internal Host: 10.0.0.2/24 (Port 80 should be expo ...