[4100] in linux-net channel archive
Re: IP Address Translation
daemon@ATHENA.MIT.EDU (really kuznet@ms2.inr.ac.ru)
Mon Aug 19 11:10:44 1996
From: inr-linux-net@ms2.inr.ac.ru (really kuznet@ms2.inr.ac.ru)
To: linux-net@vger.rutgers.edu
Date: 19 Aug 1996 17:03:42 +0400
David C Niemi/Administrator/DCLinux/LUGMAN/WAUUG (niemi@wauug.erols.COM) wrote:
: I have several people now interested in doing 1-1 address translation at a
: router, including some large sites. Can Linux do this now? I have heard
: some Cisco routers do it.
: Network Address Translation differs from masquerading and proxying in that
: each host has a unique IP address on the "outside" network, but may be
: using a different address inside. It would be sufficient to translate any
: addresses in a large block to a different block of addresses in a 1-1
: manner, though for migration purposes there may be a mix of addresses in
: the "inside" and "outside" blocks on a temporary basis.
I use such map for pretty long time. Just try traceroute to
193.233.7.86 (it is mapped 192.203.80.139).
I still do not have coherent user level interface
(f.e. I did not yet decide, should this feature reside in firewalling
or in routing code), but hope, I'll finish it soon.
: This sounds easy in general but may fail for things like talk which embed
: IP addresses inside the data.
Yes, it is correct.
But it is much more stable (and cheaper) than port based proxying anyway.
Alexey Kuznetsov.