Subject: Re: HowTo multiple IP adresses on my WAN? -
msg#00080
Joe,
> I have an address range of:
>
> CPE Computer IP range first address: xx.xxx.xxx.146
> CPE Computer IP range last address: xx.xxx.xxx.150
> CPE Computer subnet mask: 255.255.255.248
>
> I believe I have a /29 network and was wondering how I can use my
> m0n0wall for all of those IP addresses. I have tried playing with it
> for a few days now unsucessfully. I believe it is going to have
> something to do with "Server NAT" or "1:1" nat. I just can't seem to
> figure out which one I should use and how to get it to work.
Use 1:1 NAT to get m0n0wall to take connections from more than 1 IP.
Go to NAT -> 1:1 and add an entry. Depending on how your Internal LAN
looks, (for most configurations it would be /24), then you wouldn't be
able to use the /29 CIDR mask in the 1:1. Instead, specify IP by IP
the mapping to some IP address in your internal LAN space.
For example, if you had an internal server that would use 146-150, and
your internal subnet is 192.168.1.0/24, do a 1:1 mapping for
xxx.xxx.xxx.146/32 -> 192.168.1.146
xxx.xxx.xxx.147/32 -> 192.168.1.147
xxx.xxx.xxx.148/32 -> 192.168.1.148
xxx.xxx.xxx.149/32 -> 192.168.1.149
xxx.xxx.xxx.150/32 -> 192.168.1.150
I'm not necessarily sure if you could map them all to the exact same
address, but in the case that you can't, just bind your server to
those addresses if you want to use all those external IPs to hit the
same internal server.
> I would eventually like to do bandwith throttling/traffic shaping to
> prevent any single user from using all of my bandiwth.
The magic packet shaper added in 1.1b16 will do wonders on traffic shaping ;)
/sylikc
Thread at a glance:
Previous Message by Date:
Re: CF & m0n0wall problems
On Wed, 4 Aug 2004, James Doherty wrote:
> I have been able to confirm problems highlighted in this post:
>
> http://m0n0.ch/wall/list/?action=show_msg&actionargs%5B%5D=61&actionargs%5B%5D=17
>
> I also have a Sandisk CF card (64mb) and get the same errors. I'm using
> a CF->IDE convertor. Like Kevin I also used 'physdiskwrite' but I'm not
> sure if thats the problem or not. I have tried the BIOS settings on
> "Auto" and setting the F/H/S values with no difference. I tried it in
check if
http://m0n0.ch/wall/list/?action=show_msg&actionargs[]=73&actionargs[]=62
solves what you're facing.
Regards, /\_/\ "All dogs go to heaven."
dinesh@xxxxxxxxxxxx (0 0) http://www.alphaque.com/
+==========================----oOO--(_)--OOo----==========================+
| for a in past present future; do |
| for b in clients employers associates relatives neighbours pets; do |
| echo "The opinions here in no way reflect the opinions of my $a $b." |
| done; done |
+=========================================================================+
Next Message by Date:
RE: Wrap slows down
On Tue, 2004-08-03 at 09:24, Luc Naus wrote:
> The strange thing is that the problem already occured when I was still
> using v1.0. After changing to b1.16 with hotfix of Fred, the problem
> does not occur anymore.
ack, you 're right, after some more days it's bogus agian.
I 'll try to apply to fix once more, maybe something went wrong.
Marten
Previous Message by Thread:
HowTo multiple IP adresses on my WAN?
I have an address range of:
CPE Computer IP range first address: xx.xxx.xxx.146
CPE Computer IP range last address: xx.xxx.xxx.150
CPE Computer subnet mask: 255.255.255.248
I believe I have a /29 network and was wondering how I can use my
m0n0wall for all of those IP addresses. I have tried playing with it
for a few days now unsucessfully. I believe it is going to have
something to do with "Server NAT" or "1:1" nat. I just can't seem to
figure out which one I should use and how to get it to work.
Does anyone know of a howto/faq on how this is done? Or can anyone
give me a quick explanation of how I can accomplish this?
I would eventually like to do bandwith throttling/traffic shaping to
prevent any single user from using all of my bandiwth.
Thanks.
Joe
Next Message by Thread:
Re: HowTo multiple IP adresses on my WAN?
Would it be possible to do a 1:1 like this: xxx.xxx.xxx.147/32 ->
192.168.1.90 ?
Once you create the mapping, how do you create rules to allow traffic
to come in from these IP's? A specific example, just for testing,
would be VNC. I want to pass 5900 from xxx.xxx.xxx.147 to
192.168.1.90. Would I just pass from the WAN, any source, source port
5900, destination 66.146.190.147, destination port 5900?
Also would it be possible for m0n0wall to act as a transparent bridge
and filter the traffic that flows across it? So I could give a router
on the other side of m0n0wall a public ip address that has been
filtered by m0n0?
Thank you.
Joe
On Wed, 4 Aug 2004 00:48:51 -0700, sylikc <sylikc@xxxxxxxxx> wrote:
> For example, if you had an internal server that would use 146-150, and
> your internal subnet is 192.168.1.0/24, do a 1:1 mapping for
> xxx.xxx.xxx.146/32 -> 192.168.1.146
> xxx.xxx.xxx.147/32 -> 192.168.1.147
> xxx.xxx.xxx.148/32 -> 192.168.1.148
> xxx.xxx.xxx.149/32 -> 192.168.1.149
> xxx.xxx.xxx.150/32 -> 192.168.1.150
>
> I'm not necessarily sure if you could map them all to the exact same
> address, but in the case that you can't, just bind your server to
> those addresses if you want to use all those external IPs to hit the
> same internal server.