Skip to content

Research the best way to configure iptables #1

Closed
Closed
Research the best way to configure iptables#1

Description

@dguido
dguido
opened on Jun 29, 2016

Which one of these is "right"?

  • iptables -t nat -A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE
  • iptables -A POSTROUTING -s 10.0.0.0/24 -m policy --dir out --pol ipsec -j ACCEPT
  • iptables -t nat -A POSTROUTING -o eth0 ! -p esp -j SNAT --to-source [server IP]

Activity

  1. jackivanov commented on Jul 12, 2016

    @jackivanov
    jackivanov
    on Jul 12, 2016
    Collaborator

    The best way it is SNAT. MASQUERADE more usable with a dynamic IP and if we don't know the global ip of a server.
    We will use this:
    iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

  2. jackivanov
    closed this as completedon Jul 12, 2016
  3. avg951128
    added a commit that references this issue on Aug 1, 2021

    Merge pull request trailofbits#1 from jauderho/dependabot/github_acti…

    4fe8014
  4. dguido
    added 3 commits that reference this issue on Aug 3, 2025

    Fix critical privacy configuration issues

    8330568

    Fix critical privacy configuration issues

    7c143b5

    Fix critical privacy configuration issues

    e5356d2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions