Re: SSL Question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Nakisawame,

> Can I do something like this:
> 
> iptables -t nat -A PREROUTING -p tcp -d 55.55.55.56
> --dport https -j DNAT --to 192.168.0.14:443
> iptables -t nat -A PREROUTING -p tcp -d 55.55.55.57
> --dport https -j DNAT --to 192.168.0.15:443
> 
> Does this work? If it doesn't, how do I do this? This
> is driving me nuts!

This should definitely work. If it doesn't, it's probably because either 
you forgot to turn on IP forwarding
(echo 1 > /proc/sys/net/ipv4/ip_forward), or you haven't added a 
corresponding filter rule to allow the traffic through:

  iptables -t filter -I FORWARD -d 192.168.0.14 -p tcp --dport 443 \
	-j ACCEPT
  iptables -t filter -I FORWARD -d 192.168.0.15 -p tcp --dport 443 \
        -j ACCEPT

Cheers, Chris.
-- 
   ___ __     _
 / __// / ,__(_)_  | Chris Wilson -- UNIX Firewall Lead Developer |
/ (_ / ,\/ _/ /_ \ | NetServers.co.uk http://www.netservers.co.uk |
\ _//_/_/_//_/___/ | 21 Signet Court, Cambridge, UK. 01223 576516 |



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux