Actually, I will be making the DNS change and only want all traffic to forward while propagation takes place. Would propagation be any faster if I lower the TTL? If so, this would make it a non-issue. Linux303 ----- Original Message ----- From: "Ben Russo" <ben@umialumni.com> To: "Linux" <linux@usermail.com> Sent: Sunday, December 08, 2002 10:20 AM Subject: Re: Forward all traffic to another Public address > I don't know about the iptables, > But one thing I can tell you from experience setting up LOTS of servers > in data centers is to make complex use of DNS. > 1. When setting up a server give it a canonical name that relates to > the server and it's location. > 2. Assign seperate CNAME's for the services, even sometimes multiple > CNAME's for the same service. For example "us-popmail.myservers.net" > "eu-popmail.myservers.net" "webmail.myservers.net" "www.myservers.net" > etc. > 3. Then you might have all of these DNS entries referring to the same > box at first. But later, if you evern need (for scalability or for > distribution or for redundancy) to have more than one machine, your > users/clients software won't need to be reconfigured, you can instead > just change DNS and the clients won't be the wiser. > > So, with regards to the stuff below you should change DNS MX and A > records appropriately, IP redirection isn't the right way to do this. > > On Sat, 2002-12-07 at 12:15, Linux wrote: > > Does anyone have any imput on this? Also, would iptables be the best > > way to redirect the traffic? I don't have access to the router. > > > > Linux > > ----- Original Message ----- > > From: Linux > > To: netfilter@lists.netfilter.org > > Sent: Tuesday, December 03, 2002 2:52 PM > > Subject: Forward all traffic to another Public address > > > > Hello All, > > > > I am freaking going crazy and pulling my hair out. Here is I > > want to do. > > Forward all traffic (smtp, pop3, web,etc) for one IP address > > in Server box located in CA to a Server in TX > > These boxes are on separate networks. > > Here is what I did > > > > iptables -t nat -A PREROUTING -s 216.x.x.x -d 238.x.x.x -m > > state --state RELATED,ESTABLISHED -j MASQ > > iptables -t nat -A PREROUTING -d 238.x.x.x -j DNAT --to > > 216.x.x.x > > > > > > Can someone please help me as I cannot figure out what I am > > doing wrong. > > > > > > Thank you, > > > > Linux > -- > Ben Russo <ben@umialumni.com> >
