SUMMARY: route command

[Vic Engle <sunmanager@nc.rr.com>]

List,

Sorry for the late summary. I had asked the list if it was possible to 
accomplish NATing using the route command in Linux. The NATing would be 
used for a DMZ created using CP Firewall-1 on the Linux box.

Answer - No, route can not be used for NAT. Most people suggested using 
the NAT capability built into the Firewall software and that is what we 
intend to do. Some suggested iptables.

Moti Levi provided this very useful link  
http://www.phoneboy.com/fom-serve/cache/275.html

Helpful replies were received from Moti Levi, Martin Hepworth, Mick 
Morgan, Brett Geer, Brian Sherwood, Jeffrey Taylor, and Tom Yates.

The original post follows.

Thanks,
Vic


Vic Engle wrote:

> Hello List,
>
> I have a redhat 7.2 box that will run a checkpoint firewall. I will 
> need to have it also translate public IPs to private IPs for our DMZ. 
> For example I may have a webserver in the DMZ with IP address 
> 192.168.99.1 ant the public dns ip address may be 161.3.112.1. I want 
> to translate that public address to the private address at the 
> firewall. Can I do that with the route command or would I have to run 
> iptables. I prefer using route because I'm not sure iptables will work 
> in conjunction with checkpoint.
>
> Thanks,


--
Vic Engle
Unix Systems Administrator
Duke Clinical Research
919-668-8653
_______________________________________________
LinuxManagers mailing list - http://www.linuxmanagers.org
submissions: LinuxManagers@linuxmanagers.org
subscribe/unsubscribe: http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers