Thread: How to configure Full cone NAT with iptables ?

hi experts;

i want find right iptables commands combination address following need:

- nes nated thru linux box (using iptables) towards wan cloud, ntp servers situated.
- in order achieve redundancy, ntp servers in load balancing cluster 1 virtual ip address (172.30.4.245)
- problem when nes request ntp updates using 172.30.4.245, ntp response received 1 of actual ip addresses (.200, .230 .240).

example:
the iptables not allowing flow, normal behaviour since requested vs responding address not same (172.30.4.245 vs 172.30.4.230) :

request : udp 10.68.2.11:23445 ---> 172.30.4.245:123 (this before nat, of course after nat source 10.23.14.72)
response: udp 172.30.4.230:123 ---> 10.23.14.72:23445 (response wan address)

i'm wondering if there way let iptables establish udp flow based on (s-port/d-port) regardless of ip addresses, , execute nat the lan based on that.

udp/ntp example, needed services setup in same way (load balancing in cluster).




appreciate !

thanks & regards
lvl1s7a

hi lvl1s7a, , welcome ubuntu forums.

guess have question: rather try program around problem @ ntp end, why not fix end? suggest put servers on lan behind 172.30.4.245 box. if not possible should able have packets return via 172.30.4.245 box, getting re-mapped ip address.

way, have been trying figure way asked, haven't figured out.

called "wan cloud" wan cloud? of ip addresses listed reserved lan's , not routable on internet.

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [all variants] How to configure Full cone NAT with iptables ?

Ubuntu