[4100] in linux-net channel archive

home help back first fref pref prev next nref lref last post

Re: IP Address Translation

daemon@ATHENA.MIT.EDU (really kuznet@ms2.inr.ac.ru)
Mon Aug 19 11:10:44 1996

From: inr-linux-net@ms2.inr.ac.ru (really kuznet@ms2.inr.ac.ru)
To: linux-net@vger.rutgers.edu
Date: 	19 Aug 1996 17:03:42 +0400

David C Niemi/Administrator/DCLinux/LUGMAN/WAUUG (niemi@wauug.erols.COM) wrote:

: I have several people now interested in doing 1-1 address translation at a
: router, including some large sites.  Can Linux do this now?  I have heard
: some Cisco routers do it.

: Network Address Translation differs from masquerading and proxying in that
: each host has a unique IP address on the "outside" network, but may be
: using a different address inside.  It would be sufficient to translate any
: addresses in a large block to a different block of addresses in a 1-1
: manner, though for migration purposes there may be a mix of addresses in
: the "inside" and "outside" blocks on a temporary basis.

I use such map for pretty long time. Just try traceroute to
193.233.7.86 (it is mapped 192.203.80.139).
I still do not have coherent user level interface
(f.e. I did not yet decide, should this feature reside in firewalling
or in routing code), but hope, I'll finish it soon.

: This sounds easy in general but may fail for things like talk which embed
: IP addresses inside the data.

Yes, it is correct.
But it is much more stable (and cheaper) than port based proxying anyway.

Alexey Kuznetsov.

home help back first fref pref prev next nref lref last post