On Thursday 06 April 2006 07:30 am, Oliver Welter wrote:
> Hi Chuck,
>
> > my only other option is to do policy routing which i don't think our
> > switch/router ios is right for.. at least then i could target the entier /24
> > for port 80 requests and translate them to something like 7080 before it gets
> > to the machine and then back out again. messy at best i suspect.
>
> Might it be an option to do so with iptables ?
> I use this approach for some servers without any problems - I think that
>
> iptable -t nat -I PREROUTING -d 192.168.168.0/24 --dport 80 -j DNAT --to
> target:port Should work without reasonable impact on the load...
>
hmm.. ok im no iptables whiz but i will try this syntax... i have to eliminate nat since they are all public ip addresses.. i suspect maybe something like this might work in our saved rules file? (gentoo)
i suspect maybe this may need to be changed..
-A RH-Firewall-1-INPUT PREROUTING -d 64.113.34.0/24 --dport 80 [dont know what to do with -j here] --to 64.113.34.0/24:7080
basically anything that say comes in for 64.113.34.11 port 80 needs to go to the same ip address on port 7080 and likewise back out for replies..
any assistance is greatly appreciated..
> Oliver
> --
> Diese Nachricht wurde digital unterschrieben
> oliwel's public key: http://www.oliwel.de/oliwel.crt
> Basiszertifikat: http://www.ldv.ei.tum.de/page72
>
-- Chuck "...and the hordes of M$*ft users descended upon me in their anger, and asked 'Why do you not get the viruses or the BlueScreensOfDeath or insecure system troubles and slowness or pay through the nose for an OS as *we* do?!!', and I answered...'I use Linux'. " The Book of John, chapter 1, page 1, and end of book
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Apr 6 12:47:35 2006