NETMAP is a new implementation of the
SNAT and
DNAT targets where the host part
of the
IP address isn't changed. It provides a 1:1
NAT
function for whole networks which isn't available in the standard
SNAT and
DNAT functions. For example,
lets say we have a network containing 254 hosts using private IP addresses (a
/24 network), and we just got a new /24 network of public
IP's. Instead of
walking around and changing the IP of each and every one of the hosts, we would
be able to simply use the
NETMAP target like -j NETMAP -to
10.5.6.0/24 and voila, all the hosts are seen as 10.5.6.x when they leave the
firewall. For example, 192.168.0.26 would become 10.5.6.26.
http://www.linuxtopia.org/Linux_Firewall_iptables/x4471.html
Table 11-8. NETMAP target options
| Option | --to |
| Example | iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -j
NETMAP --to 10.5.6.0/24 |
| Explanation | This is the only option of the NETMAP target. In the above
example, the 192.168.1.x hosts will be directly translated into 10.5.6.x.
|
