Re: [Vserver] ability to use 130+ ips within a vserver yet?

From: Oliver Welter <>
Date: Thu 06 Apr 2006 - 13:01:19 BST
Message-Id: <>

Hi Chuck,

>> iptable -t nat -I PREROUTING -d --dport 80 -j DNAT --to
>> target:port Should work without reasonable impact on the load...
> hmm.. ok im no iptables whiz but i will try this syntax... i have to eliminate nat since they are all public ip addresses.. i suspect maybe something like this might work in our saved rules file? (gentoo)

You will need NAT - as this will translate the destination...

> i suspect maybe this may need to be changed..
> -A RH-Firewall-1-INPUT PREROUTING -d --dport 80 [dont know what to do with -j here] --to

Basically "PREROUTING" is another chain than the one you are using - so,
I suggest:
iptables -t nat -A PREROUTING -p tcp -d --dport 80 -j
DNAT --to :7080

This will redirect every traffic to to the same ip as
the orginal paket but going to port 7080.

If you want to stuff everything into one vServer with one IP, just
repace the target with
-j DNAT --to vserversip:port



PS: if you have problems revealing private data write PM, or join
#vserver - will be there shortly as oliwel

Diese Nachricht wurde digital unterschrieben
oliwel's public key:

Vserver mailing list

Received on Thu Apr 6 13:00:34 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 06 Apr 2006 - 13:00:39 BST by hypermail 2.1.8