Re-2: Ubuntu Server with 2 NICs, help with routing

Tue Mar 25 08:40:19 UTC 2014

On Tue, 2014-03-25 at 07:13 +0000, Kevin Olbrich wrote:
> Natting twice is bad but if you want your server to be a firewall, you must NAT 
> twice to have a seperated network on your second network card.

No you don't. You only need to NAT twice if your gateway is incapable of
NATting two address ranges. 

NAT is not a firewall. You can filter packets without doing NAT. NAT is
needed only at the border of your network, where private addresses must
be multiplexed into fewer (usually one) public address.

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://twitter.com/kauer389

GPG fingerprint: EC67 61E2 C2F6 EB55 884B E129 072B 0AF0 72AA 9882
Old fingerprint: B862 FB15 FE96 4961 BC62 1A40 6239 1208 9865 5F9A