Get full access to Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT, and L7-filter and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

Summary

This chapter showed you how to perform Network Address Translation and IP packet mangling using netfilter/iptables.

We saw:

What Network Address Translation is
Types of NAT: SNAT or Masquerading, DNAT, full cone NAT
Requirements for performing NAT with netfilter/iptables
How to SNAT with iptables
How to DNAT with iptables
How to perform transparent proxy with iptables
How to perform double NAT with iptables
What packet mangling is
What fields of the IP packet header can be modified using iptables
How packets are matched against the chains of rules in the netflter mangle table

Get Designing and Implementing Linux Firewalls and QoS using netfilter, iproute2, NAT, and L7-filter now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now