NAT Masquerading

Tutorial on using iptables to masquerade traffic through your firewall's IP address. Useful for creating a home router.

[@thirteenteeth]

Perfectly succinct video on iptables masquerading

[@bill0cao]

This is a great video. But @debian, do we need to add virtual link/interface like "lan" and "wan" specifically? Thanks

[@bill0cao]

I just used my only available ethernet interface to replace "lan" and "wan" in the command from the video, it worked.

[@simonegarro2928]

I didn't get how the other machine was configured, I have my Kali machine in which I've settled my iptables rules and a Ubuntu machine which should work has the second one that he use in the video; when I try to ping or navigating through Firefox the iptable for NAT remains the same, always 0, how can I fix this?

[@diogomartinsferreira8813]

Hi, so you need to make sure your Kali machine is the gateway for your Ubuntu machine. Also they need to be on the same network.

[@raajseeker]

But how to save these ? Because after reboot all will be gone.

[@luohua6180]

why incoming package can be passed into lan ?there is no DNAT, dst ip of the ping reply package is wan ip or lan ip?

[@accessory2008]

probably because that masquerade rule?

[@sauravythandle]

yeah pretty confusing. How are the incoming packets forwarded from wan to lan ?

[@co88liwan31]

If I am understanding correctly, the syseng@debian is acting as a router for syseng@localhost, not very clear how you configure syseng@debian as the gateway of syseng@localhost?

[@accessory2008]

just need to set @debian ip as that .1 ip and enable routing (forwarding)

[@mikelangley8888]

where do i find this "ipt" command? is it an alias?

[@accessory2008]

yes, it is an alias. He mentioned in his previous video. It is iptables -L -n -v --line-numbers see here: kzbin.info/www/bejne/rnnapXpviJ15rdE

[@napoleonarouldass4416]

Lovely Videos, very helpful, very clean and very neat. Just Rocking !! How do i do this particular Forwarding Lets say I have setup a VM on the Cloud ( Digital Ocean ) It should basically forward all HTTP, HTTPS Req to Google as if The Google would know it came from our Proxy Server.

[@paulg.3067]

Thanks for the video but the audio quality makes it quite uncomfortable to follow... Sounds like a 2kbps of a Mars-->Earth Audio Link...

[@nimda2sdfsdfsd]

His voice is like that.