Nethserver in routed mode

Support
1

Is it possible to use Nethserver in routed mode? I would like, all clients in internals networks (green) to reach the red networks without being natted.
I have in mind a situation where there are other untrusted (but internal) networks between internet and green zone. In these networks, the clients of the green zone must be recognizable by their IP.

Is sth like this enough?
/sbin/sysctl -w net.ipv4.ip_forward=1

2

Maybe you need a guest network zone?
See http://docs.nethserver.org/en/latest/base_system.html#network
I have a setup where a single nethserver with a single adsl line is shared by two companies. I configured the lan of company 1 as green zone and company 2 as blue. Then I used firewall rules to open required services from blue to lan (mainly access to the mail server).
Network traffic is natted only when leaving the red zone.

3

I understand what you are saying, but I need to route all internet traffic of the “green” clients to a router in this network (blue as you suggest). I don’t think that this is possible within the Nethserver interface

4

Maybe I’m misunderstaning, but you probably mean “Static routes” under the Configuration section.
http://docs.nethserver.org/en/latest/base_system.html#static-routes
BTW, suggestions on how to improve the manuals are always welcome.

5

Thanks for the answer, but I really need to disable NAT on the external (red) interface. Is this possible?

6

I never tried before, but wan SNAT could be disabled with a template-custom:

mkdir -p /etc/e-smith/templates-custom/etc/shorewall/masq
> /etc/e-smith/templates-custom/etc/shorewall/masq/20red

Then rebuild and restart the firewall:

signal-event firewall-adjust

Please, let me know how it goes. Thanks.

7

Ok. It works. Thx
So, in simple words, we just have to create an empty /etc/e-smith/templates-custom/etc/shorewall/masq/20red file and disable transparent proxy.
I have to say, that I am impressed with the firewall that worked on routed mode without any other change.

8

What do you take us for?? :smile: NethServer is hugely simple! We call it template-custom, find out more here http://docs.nethserver.org/projects/nethserver-devel/en/latest/templates.html

1 Like
9

how I can prove that nethserver is in route mode…?

10

how I can prove that nethserver is in route mode…?

11

A post was merged into an existing topic: How make nethserver routing