Questions tagged [nat]
Network Address Translation, a technology used to translate a private IP address into a public IP.
1,162
questions
14
votes
2
answers
5k
views
How does the airconditioner app on my phone access my aircon controller through my router?
I understand how a router uses NAT/NAPT to enable a client on my home network to request a packet from an external server, and hence how the router knows to which client to send the packet that is ...
0
votes
0
answers
180
views
Openwrt hardware nat bypass implications
My setup
ISP provided router (the gateway) on a 1Gbit/100Mbit fiber line and an openwrt router (the router). The gateway does not support bridge mode so I followed the guide for Poor's man bridge mode,...
0
votes
0
answers
46
views
Trying to get 1:1 NAT working with OpenVPN (Layer 2 tap tunnel)
All. I have a small project which needs to have everything in the same collision domain (Layer 2). I was wondering which iptables commands I would need to run in order to get the printer (192.168.192....
0
votes
0
answers
208
views
UFW SSH deny rule not working
TLDR: I'm trying to block SSH connections to a server; the server itself is connected to a ubuntu router with UFW on it, but external SSH connections to the server aren't getting denied, UFW doesn't ...
-2
votes
1
answer
492
views
Can't ping my external CGNAT IP address from external network [duplicate]
I'm new to networking and I'm trying to scan my external IP from an external network.
I first tried finding my public IP from whatismyIP.com. The IP address on that site was different from the ...
1
vote
1
answer
64
views
Networking: NAT two interfaces together on Windows
I have the following setup:
Openvpn client (Linux) (Openvpn IP 192.168.99.4)
Openvpn client (Windows) (Openvpn IP 192.168.99.2)
Openvpn server (Linux) (Openvpn IP 192.168.99.1)
Now, both clients ...
0
votes
3
answers
147
views
How routers deal with only one external IP?
I recently discovered that all my devices connected to a WiFi router have the same external IP. Call it 20.20.20.20. The thing that I don't understand is how the router figures out which IP packet ...
0
votes
0
answers
37
views
BGW320/TP-Link AX10 Port Forward Not Working
I have a TP-Link AX10 router behind a BGW320 router (set in IP passthrough mode) to the AX10. The AX10 should be receiving all external input with this configuration, but whenever I port forward / &...
-3
votes
1
answer
381
views
Can router give the same public IP to 2 different networks? [closed]
I have set up a virtual machine and specified an IP address for it that is outside my home network. I cannot ping this machine and access it through the Internet from my host machine. I presume it is ...
0
votes
1
answer
963
views
WSL 2 NAT issue preventing reverse shell on TryHackMe
I installed Ubuntu in WSL 2 on Windows 11. However, my WSL 2 instance is behind NAT, which is causing some problems. For example, I am unable to get a reverse shell on TryHackMe because my WSL 2 ...
1
vote
1
answer
251
views
nftables, dnat in output chain appears to be done after routing
I have an EC2 instance and an application that requires to send to the EIP from within the instance.
I am trying to configure a dnat on the output chain so that the packets dont go out to the internet ...
-1
votes
1
answer
344
views
With two houses and two internet connections, I want to use site A's internet from site B via a VPN, preferably wireguard
I have two homes, both of which have internet. Let's say that I am currently at "Site A", but I want to connect to the internet via "Site B", in order to take advantage of Site B's ...
0
votes
1
answer
292
views
NAT masquerade refuses to work on Link-Local network
I am developing a device, in terms of usage and network connectivity it is similar to a printer with an Ethernet port. This device should also work in p2p scenarios, i.e. when the Ethernet port of the ...
0
votes
1
answer
272
views
NAT not working properly with more LANs - source address is replaced with LAN gateway IP
Running Mikrotik RouterOS, does not matter if version 6.48 or 7.9.
What works:
Default configuration makes NAT keep source address (i.e. public IP of client which connects to server, chain: input - ...
-2
votes
1
answer
479
views
what is the most stable and fastest tunnel for a VPN? [closed]
i live in Iran and is all u guys know our goverment is limiting the access to the internet and they are really getting serious about this.
so what the situation is right now : first of all we cant ...
0
votes
1
answer
683
views
Is it possible to enable UPnP without going into Router web interface?
So I lost the password for my router, and I am living in a rural area, so contacting the ISP is a hassle. I was wondering if it is possible to enable UPnP option without accessing the router settings. ...
0
votes
0
answers
194
views
How to get wireshark to sniff packets between client and server using VMs attached to NAT Network
I am really new to pen testing. I am using Oracle Virtualbox, and I have three kali linux VMs setup. I am trying to use wireshark on a VM to sniff packets between a Modbus client VM and a Modbus ...
0
votes
0
answers
39
views
connect to ssh via iptable tunnel
there is two server A (1.1.1.1) and B(2.2.2.2)
I defined an iptable PREROUTING like this
sudo iptables -t nat -A PREROUTING -p tcp --dport 1111 -j DNAT --to-destination 2.2.2.2:22
sudo iptables -t nat ...
0
votes
1
answer
2k
views
iptables nat table does not work as expected?
I aim to have some iptables rules to observe the flow of network traffic through iptables rules. However, iptables does not seem to work as I expected. It appears that packets which are the response ...
1
vote
0
answers
58
views
Trying to setup iptables properly
I have dummy0 interface on my machine. I need to forward its port 10456 towards loopback port 10456 which is forwarded via ngrok to some remote endpoint (very convinient). I have never done any ...
0
votes
0
answers
91
views
Security Concerns for VMs in DMZ
In Vmware Workstation a VMnet8(NAT) Interface on Host System acts as a External Port for a VM Guest, If a Put the VM in DMZ can the Host get compromised or attacked as the VMnet8 has Ip addresses ...
1
vote
0
answers
2k
views
WSL2 Routing and NAT Rules
I recently installed WSL2 on my Windows 10 PC and I'm trying to understand how traffic is handled to and from WSL2. The below article states that WSL2 is running as a managed Hyper-V VM and uses a NAT ...
0
votes
0
answers
162
views
Communicate with device on different subnet (router changes only)
I have a MikroTik router, and two other devices on the network, A and B:
MikroTik router: 192.168.133.1/22
device A: 192.168.133.160/22, port 2 (LAN)
device B: 192.168.100.1/24, port 3 (LAN)
I would ...
2
votes
1
answer
1k
views
How to enable hairpin NAT between docker containers using bridge network
We have 2 docker containers running on the same host using bridge network (host network isn't an option due to port conflicts).
Container B is listening on port 9000 which is a service open on the ...
0
votes
0
answers
92
views
DNAT web server behind double firewall
I have this topology and I want to access my webserver that's located behind the internal firewall
sophos WAN : 213.x.x.75
sophos LAN : 172.16.0.2/24
Pfsense WAN : 172.16.0.1/24
pfsense LAN : 192.168....
0
votes
0
answers
722
views
How to access JioFiber's admin panel remotely?
I want to access my jiofiber router's admin panel from the internet. Can't simply forward the port because the ISP's using Carrier Grade Network Address Translation (CGNAT). I don't have access to the ...
1
vote
1
answer
1k
views
Using VPS to give Public IP to on home network
As my provider does not give me a public IPv4 Address, I am using a VPS combined with a Wireguard tunnel to make my homeserver reachable from the Internet (via Ipv4 and Ipv6).
On my homeserver, the ...
1
vote
0
answers
2k
views
No internet connection in VM with Libvirt NAT
Hello super users,
I am trying to get an internet connection up and running in my KVM/QEMU VM through Libvirt's default NAT.
Unfortunately, the guest (Windows 10) sees the virtual adapter as an "...
0
votes
0
answers
194
views
Hyper-V: Nat blocking guest access to host ports on internal network
I have been trying to get this to work for some time.
Hyper-V switch myswitch is created as internal virtual network and an IP is configured for the switch adapter
Get-NetAdapter
# choose switch ...
0
votes
1
answer
57
views
Remote administration between 2 host behind different NAT
I have 2 computers, both connect to the internet using different routers in different locations, therefore not having a fixed public IP address.
Computer A is the admin Pc and needs to get a shell on ...
1
vote
0
answers
136
views
How to configure DNAT on linux PC so that windows PC destination address can NAT to external linux server?
Topology:
Windows PC (Eg.,20.0.0.2) <---> enp6s0 20.0.0.1 [Ubunthu 20.04 as NAT] enp8s0 172.30.18.95<-->eth1 - Linux PC {172.30.18.90}
Requirement:
I want to ftp 30.0.0.1 from windows PC, ...
1
vote
1
answer
458
views
Dynamic DNS NAT for IPv4 and AAAA for IPv6 - is it possible?
I have a router named alice, and servers named bob and charlie. I want to be able to use IPv6 to go directly to alice, bob, or charlie, and I want IPv4 to continue to work, giving me alice's address ...
0
votes
1
answer
2k
views
NAT setup on Proxmox
I'm trying to set up NAT on Proxmox VE 7.3-4. I followed this guide but changed the IP range and didn't do any port forwarding yet https://bobcares.com/blog/setup-nat-on-proxmox/
I edited /etc/network/...
1
vote
0
answers
218
views
SSH doesn't work through mikrotik
I have Mikrotik RB952Ui-5ac2nD. Everything is working fine.
But now, I found little problem.
I can not connect from LAN to any SSH in internet, but, when I'm connected without mikrotik, i havent any ...
1
vote
1
answer
154
views
How can I get connection attempts behind a NAT router?
I've been playing with nftables recently and set up logging every incoming TCP SYN packet to my local machine. I noticed every minute I get a couple of random connection attempts on various ports (...
0
votes
0
answers
533
views
How to use WinNAT for both Hyper-V VMs and Docker containers at the same time
I'm trying to set up a home server to host both VM's and Docker containers.
No issues on the VMs running in Hyper-V part:
Create a new internal switch (NatSwitch)
Set it's IP configuration: New-...
1
vote
0
answers
70
views
MrikoTik Source NAT With Pub IP's
Let me start off saying that I am use to FortiGate and have never programmed a MikroTik Router. I do have everything already built with the Private subnet but none of these publics added to the ...
1
vote
1
answer
4k
views
Asus DSL Modem Routers: How do you enable bridge mode / avoid double NAT
For Asus DSL modem routers (for example DSL-N16), how can I enable bridge mode so that a separate router handles all the routing etc. and the DSL-N16 just acts like it is in modem-only mode?
I want to ...
0
votes
0
answers
294
views
Is it possible to chain two vpn ( l2tp ) connections?
I have three computers, A, B, C (I installed windows server 2019 on them).
PC C has access to the webpage D, PC A and B do not.
I first dialed a vpn connection (l2tp) from A to B, then I dialed a vpn ...
0
votes
1
answer
589
views
How to forward ports to play mario kart 8 on nintendo switch on a consumer router (huawei WS5200)?
I have a HUAWEI WiFi WS5200 router that only supports one-by-one port forwarding setting. I can't specify a range.
The Nintendo Guide says to port-forward 1024 to 65535 which I can't on this router.
...
1
vote
0
answers
390
views
Public IP configuration on Home router ( TP-link 940N)
I got 196.188.173.32/30 ip adress from my ISP with the following configuration.
Wan ip : 10.126.10.158/29
Gateway : 10.12.10.157
Lan Ip : 196.188.173.32/30
I have configured the router per the ISP,...
1
vote
0
answers
30
views
How do ping packets get to the ping utility in a NATed network? [duplicate]
I did this test from two PCs at home that are connected to a typical SOHO router, so the router is doing Network Address Translation.
I pinged successfully an IP address from the two computers:
ping 8....
0
votes
1
answer
989
views
IPv6 masquerading on linux
Problem
I have following setup to access both IPv4 and IPv6 internet
[RockyLinux 9 ] [pfSense ]
[GRE IPv6: fdfe:xxxx::1/64 ]<------ GRE ...
1
vote
0
answers
381
views
Routing Traffic from OpenVPN Server -> Local Network -> OpenVPN Client
So I have a PFsense box running on my home network. I set up PIA as the a VPN client using this tutorial found here as well as a helpdesk article from PIA themselves. After getting that all setup I ...
0
votes
0
answers
304
views
Access home web services remotely with DDNS and NAT forwarding
I have a local server running a couple of web service on different ports. The server is connected to a router so I can access these if I am on the same LAN.
The server has a static local ip: 192.169....
1
vote
0
answers
100
views
Are there options other than TURN for P2P behind symmetric a NAT? [closed]
I'm trying to implement a system that allows clients to establish direct connections to each other with little to no configuration.
To my understanding a STUN server doesn't work behind a symetric NAT ...
1
vote
1
answer
340
views
SSH reverse tunneling to a linux machine
I have essentially the same configuration as this question (relevant image below):
where I want to be able to ssh into RPC-2 from either LPC-1 directly and from any arbitrary machine via LPC-1. I ...
0
votes
1
answer
2k
views
Forward client IP addresses through a Wireguard tunnel, instead of masquerading with tunnel IP
I am using a Debian VPS with a static IP to provide port forwarding for a few self-hosted services including a Minecraft server. My current arrangement is functional in that it allows players to ...
1
vote
1
answer
447
views
Understanding inconsistent ability to RDP to Windows server
I have the occasional need to remote into a cloud-hosted Windows Server VM via RDP, but I run into problems in some cases.
Yes, a private VPN to the server is better, but my question here is to ...
0
votes
0
answers
243
views
NAT forward and keep client IP
I have a server in the middle of my VPN connection as explained:
Client: `123.123.123.123` --> Linux 1: `1.2.3.4` --> Linux 2: `5.6.7.8`
So, 5.6.7.8 is the VPN server and 1.2.3.4 is only a ...