Subject:
[44net] Some hosts from net, rest masq'd?
From:
Steve L <kb9mwr(a)gmail.com>
Date:
07/19/2015 09:29 PM
To:
"44net(a)hamradio.ucsd.edu" <44net(a)hamradio.ucsd.edu>
I had a guy ask me who I don't think is on this list yet, if its
possible so have some 44 ips behind his gateway reachable from the
public net, and all the remaining to use masquerading rather than the
default 44/8 UCSD route. I told him I am sure it can be done.
I am sure there is more than one way to do this. Here is what I came
up with, I mark the traffic type by matching source address (I am
using some hosts on my lan to test). Set a rule for that, and then
finally set a route based on that rule.
I am doing that on my system as well, but rather than using a separate rule that
is matched by the mark, I use the mark to enable the masquerade in POSTROUTING.
(using a -m mark --mark 1 match)
But of course it can be done either way.
Rob