This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG 7.507 - Why "Masquerading" in conjunction with proxy

Hello ,

i've got a question about using the "masquerading" function in Astaro.
My situation is:
I've added a whole network (192.168.168.0) into the "allowed network" list of the web proxy. Then i skipped one pc (192.168.168.54) , because this pc should be able to use the web completely. Now i added a packet filter rule for this pc (pc->http,ftp,-> any) . But this shows no result, because the client can not access the web without either adding the proxy in the browser manually or addind this client to the "masquerading" list. And this is the point i just don't get. Is it really necessary to add a NAT Rule for each client (And/OR network) for accessing the web , if the client (or network) is not using the proxy?

This thread was automatically locked due to age.

0 BAlfson over 15 years ago

Yes you need a NAT rule for each network. However, if you have 192.168.1.0/24 and 192.168.168.0/24, you can specify 192.168.0.0/16 -> External and thereby masq both networks.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Rumak18 over 15 years ago in reply to BAlfson

Ok, so the result of this means, that i always need a masquerading rule for my networks/clients to enter the internet without a proxy? I guess this is not only an Astaro issue right?
I know it might sound like a stupid question, but i just want to READ IT in cold print.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 15 years ago

Correct... each LAN or DMZ or VPN Pool needs its own MASQ.

Barry
Cancel
Vote Up 0 Vote Down

Cancel